ZDI-CAN-12948: Microsoft SharePoint WebPart Interpretation Conflict Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of server-side controls in WebParts. By specifying a control using a non-canonical string, an unsafe server-side control can be instantiated. An attacker can leverage this vulnerability to execute code in the context of the service account.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-12948?
The severity of ZDI-CAN-12948 is considered high due to its potential to allow remote code execution on affected Microsoft SharePoint installations.
How do I fix ZDI-CAN-12948?
To fix ZDI-CAN-12948, you need to apply the latest security updates provided by Microsoft for SharePoint.
Who is affected by ZDI-CAN-12948?
ZDI-CAN-12948 affects installations of Microsoft SharePoint that have not been updated with the latest security patches.
What kind of attack can exploit ZDI-CAN-12948?
ZDI-CAN-12948 can be exploited by authenticated attackers to execute arbitrary code on the vulnerable server.
What are the potential consequences of ZDI-CAN-12948?
The potential consequences of ZDI-CAN-12948 include unauthorized access, data breach, and disruption of services on compromised SharePoint servers.