CVE-2020-1323

EPSS 2.4%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 2.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

09 jun 2020Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link, aka 'SharePoint Open Redirect Vulnerability'.

Productos afectados

Microsoft · Microsoft SharePoint Enterprise Server Microsoft · Microsoft SharePoint Foundation Microsoft · Microsoft SharePoint Server

Referencias

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1323