CVE-2020-0891
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'. This CVE ID is unique from CVE-2020-0795.
- Score
- CVSS 3.1 5.4 Medium
- Status
- Modified - secure@microsoft.com
- Published
- 2020-03-12
- Last modified
- 2025-02-28
- Weaknesses
- CWE-79
Affected products
- Microsoft Sharepoint Enterprise Server (Microsoft)
- Microsoft Sharepoint Foundation (Microsoft)
- Microsoft Sharepoint Server (Microsoft)
- Sharepoint Enterprise Server (Microsoft)
- Sharepoint Foundation (Microsoft)
- Sharepoint Server (Microsoft)
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0891
