ID:2923 - Exploit for Spoofing attack in Microsoft SharePoint Server - CVE-2020-0976

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to perform spoofing attack.

The vulnerability exists due to the Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. A remote authenticated attacker can send a specially crafted request and spoof page content.

Remediation