ZDI-CAN-20506: ZDI-23-382: Microsoft SharePoint WSSXmlUrlResolver Server-Side Request Forgery Vulnerability
Published Apr 11, 2023
·Updated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability.
Affected Software
1 affected component
Microsoft SharePoint
Event History
Apr 11, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-20506?
The severity of ZDI-CAN-20506 is considered high due to its potential for sensitive information disclosure.
2
How do I fix ZDI-CAN-20506?
To fix ZDI-CAN-20506, ensure that you apply the latest security updates and patches provided by Microsoft for SharePoint.
3
Who is affected by ZDI-CAN-20506?
Organizations using Microsoft SharePoint, particularly those requiring authentication, are affected by ZDI-CAN-20506.
4
Can ZDI-CAN-20506 be exploited without authentication?
No, ZDI-CAN-20506 requires authentication to exploit the vulnerability.
5
What type of information can be disclosed due to ZDI-CAN-20506?
ZDI-CAN-20506 can potentially disclose sensitive information stored within Microsoft SharePoint installations.