Microsoft SharePoint Spoofing Vulnerability via Cross-Site Scripting

A cross-site scripting vulnerability has been identified in Microsoft SharePoint Server products, including SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Enterprise Server 2016. This vulnerability allows an authorized attacker to perform spoofing over the network by improperly neutralizing input during web page generation.

Impact

Exploitation of this vulnerability could lead to spoofing attacks, allowing an attacker to impersonate another user or entity.

Remediation

Users can download the security update for their respective SharePoint version from the Microsoft Update Catalog. Instructions for applying the update are available in the corresponding Knowledge Base article.