Microsoft SharePoint Server Cross-Site Scripting Vulnerability Allowing Spoofing

A cross-site scripting vulnerability has been identified in Microsoft SharePoint Server Subscription Edition. This issue arises from improper input neutralization during web page generation, allowing an authorized attacker to perform spoofing over the network. Exploitation of this vulnerability could enable the attacker to execute scripts in the context of the current user by persuading them to click a link, thereby launching a cross-site scripting attack on the SharePoint Server.

Impact

Exploitation of this vulnerability could lead to spoofing attacks, allowing an attacker to impersonate a user or entity.

Remediation

Users can download the security update for Microsoft SharePoint Server Subscription Edition from the Microsoft Update Catalog. Knowledge Base Article 5002815 provides additional information.