Microsoft SharePoint Path Traversal Vulnerability Leading to Remote Code Execution

A path traversal vulnerability has been identified in Microsoft Office SharePoint, allowing an authorized attacker to execute code remotely. This issue arises from improper restrictions on file paths, enabling exploitation over the network.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected SharePoint server.

Remediation

Users can download the security update for Microsoft SharePoint Server Subscription Edition, SharePoint Server 2019, or SharePoint Enterprise Server 2016 from the Microsoft Update Catalog. Instructions for applying the update are available in the corresponding Knowledge Base articles.