CVE-2020-1148: XSS
Published Jun 9, 2020
·Updated
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1289.
Affected Software
4 affected components
Microsoft SharePoint Enterprise Server=2013-sp1
Microsoft SharePoint Enterprise Server=2016
Microsoft SharePoint Server=2010-sp2
Microsoft SharePoint Server=2019
Remediation
Event History
Jun 9, 2020
CVE Published
via MITRE·07:43 PM
Data Sourced
via MITRE·07:43 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-1148?
CVE-2020-1148 has a severity rating of important by Microsoft.
2
How do I fix CVE-2020-1148?
To fix CVE-2020-1148, you should apply the latest security updates provided by Microsoft for the affected SharePoint versions.
3
Which versions of SharePoint are affected by CVE-2020-1148?
CVE-2020-1148 affects Microsoft SharePoint Server 2010 SP2, 2013 SP1, 2016, and 2019.
4
What type of vulnerability is CVE-2020-1148?
CVE-2020-1148 is a spoofing vulnerability that allows attackers to send specially crafted web requests.
5
Can CVE-2020-1148 be exploited remotely?
Yes, CVE-2020-1148 can be exploited remotely if the attacker can send requests to the vulnerable SharePoint server.