CVE-2023-24955: Microsoft SharePoint Server Code Injection Vulnerability

Published May 9, 2023
·
Updated

Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.

Other sources

Microsoft SharePoint Server Remote Code Execution Vulnerability

Affected Software

10 affected componentsFixes available
Microsoft SharePoint Server 2019
Microsoft SharePoint Server Subscription Edition
Microsoft SharePoint Server
Microsoft SharePoint Enterprise Server=2016
Microsoft SharePoint Server
Microsoft SharePoint Server=2019
Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Server Subscription Edition<16.0.16130.20420
16.0.16130.20420
Microsoft SharePoint Server 2019<16.0.10398.20000
16.0.10398.20000
Microsoft SharePoint Enterprise Server 2016<16.0.5395.1000
16.0.5395.1000

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 16.0.16130.20420Patch KB5002390
  2. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 16.0.10398.20000Patch KB5002389
  3. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 16.0.5395.1000Patch KB5002397
  4. Compensating control

    Discontinue use of the product if mitigations are unavailable.

Event History

May 9, 2023
CVE Published
07:00 AM
Data Sourced
07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
Description
CVE Published
via MITRE·05:03 PM
Data Sourced
via MITRE·05:03 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 12, 2024
News Published
07:24 PM
News Published
via The Register·07:34 PM
Jan 20, 2024
News Published
via The Register·07:39 PM
Mar 26, 2024
Known Exploited
via CISA·12:00 AM
Known Ransomware
via CISA·12:00 AM
Mar 27, 2024
News Published
via BleepingComputer·04:24 PM
News Published
via BleepingComputer·04:26 PM

Peer vulnerabilities

Found alongside the following vulnerabilities.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is CVE-2023-24955?

CVE-2023-24955 is a vulnerability in Microsoft SharePoint Server that allows remote code execution.

2

How severe is CVE-2023-24955?

CVE-2023-24955 has a severity rating of 7.2 (critical).

3

Which versions of SharePoint Server are affected by CVE-2023-24955?

CVE-2023-24955 affects SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Enterprise Server 2016.

4

How can I fix CVE-2023-24955?

You can fix CVE-2023-24955 by applying the relevant patches provided by Microsoft.

5

Where can I find the patches for CVE-2023-24955?

You can find the patches for CVE-2023-24955 on the Microsoft website.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203