CVE-2018-8254
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft Project Server, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8252.
- Score
- CVSS 3.0 5.4 Medium
- Status
- Modified - secure@microsoft.com
- Published
- 2018-06-14
- Last modified
- 2024-08-05
- Weaknesses
- CWE-79
Affected products
- Microsoft Project Server (Microsoft)
- Microsoft Sharepoint (Microsoft)
- Project Server (Microsoft)
- Sharepoint Foundation (Microsoft)
- Sharepoint Server (Microsoft)
References
- http://www.securityfocus.com/bid/104325
- http://www.securitytracker.com/id/1041106
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8254
