CVE-2018-8300: Input Validation

Published Jul 11, 2018

Updated

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka "Microsoft SharePoint Remote Code Execution Vulnerability." This affects Microsoft SharePoint.

Affected Software

2 affected components

Microsoft SharePoint Enterprise Server=2013-sp1

Microsoft SharePoint Enterprise Server=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8300

Event History

Jul 11, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Data Sourced

via NVD·12:29 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2018-8300?

CVE-2018-8300 is classified as a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2018-8300?

To fix CVE-2018-8300, apply the latest security updates released by Microsoft for SharePoint 2013 SP1 and SharePoint 2016.

Which versions of SharePoint are affected by CVE-2018-8300?

CVE-2018-8300 affects Microsoft SharePoint Enterprise Server 2013 SP1 and 2016.

What are the potential impacts of CVE-2018-8300?

Exploitation of CVE-2018-8300 could allow an attacker to execute arbitrary code on the affected SharePoint server.

Can CVE-2018-8300 be exploited remotely?

Yes, CVE-2018-8300 can be exploited remotely, making it a significant risk to affected systems.