Mar 26, 2024
1 new incident, 0 with updates.
Started
- ClosedPatched
Microsoft SharePoint Server Code Injection
Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely. Added to the CISA KEV catalog on 2024-03-26. CISA lists known use in ransomware campaigns. CVE-2023-24955 was assigned before 2024; the KEV listing came in 2024.
Microsoft SharePoint ServerClosed Mar 26, 2024