First published: Tue Jun 09 2020(Updated: )
An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link, aka 'SharePoint Open Redirect Vulnerability'.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft SharePoint Enterprise Server 2016 | =2016 | |
Microsoft SharePoint Server 2010 | =2013-sp1 | |
Microsoft SharePoint Server 2010 | =2019 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-1323 is classified as a moderate severity vulnerability.
To mitigate CVE-2020-1323, it is recommended to apply the security updates provided by Microsoft for affected SharePoint versions.
CVE-2020-1323 affects Microsoft SharePoint Enterprise Server 2016, SharePoint Server 2013 SP1, and SharePoint Server 2019.
CVE-2020-1323 is categorized as an open redirect vulnerability.
Exploitation of CVE-2020-1323 could allow an attacker to perform spoofing attacks by redirecting users to malicious URLs.