Microsoft Office Project Server Cross-Site Scripting Vulnerability Allowing Spoofing

A cross-site scripting vulnerability has been identified in Microsoft Office Project Server. This issue allows an authorized attacker to perform spoofing over a network by improperly neutralizing input during web page generation. The vulnerability affects several versions of Microsoft SharePoint, including SharePoint Server 2019, SharePoint Enterprise Server 2016, and SharePoint Server Subscription Edition.

Impact

Exploitation of this vulnerability could lead to spoofing attacks, allowing an attacker to impersonate another user or entity.

Remediation

Users can download the security update for Microsoft SharePoint Server 2019, SharePoint Enterprise Server 2016, or SharePoint Server Subscription Edition from the Microsoft Update Catalog.