CVE-2023-24955 — Microsoft SharePoint Server Code Injection Vulnerability

CISA KEVExploited: confirmedMicrosoft

Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.

Vulnerability details

Affected productsSharePoint Server
KEV remediation due2024-04-16