Microsoft SharePoint Spoofing Vulnerability via Cross-Site Scripting

A cross-site scripting vulnerability has been identified in Microsoft SharePoint Server products, allowing authorized attackers to perform spoofing attacks over the network. This issue arises from improper input neutralization during web page generation, which could be exploited by convincing users to open malicious links.

Impact

Exploitation of this vulnerability could lead to spoofing attacks, allowing an attacker to impersonate another user or entity.

Remediation

Users can download the security update for Microsoft SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Enterprise Server 2016 from the Microsoft Update Catalog. Instructions for downloading the security update are available on the Microsoft Support website.