ID:5566 - Exploit for Code Injection in Microsoft SharePoint Server - CVE-2021-31181

 
Main Vulnerability Database Exploits ID:5566 - Exploit for Code Injection in Microsoft SharePoint Server - CVE-2021-31181

ID:5566 - Exploit for Code Injection in Microsoft SharePoint Server - CVE-2021-31181

Published: June 16, 2021


Vulnerability identifier: #VU53081
Vulnerability risk: Medium
CVE-ID: CVE-2021-31181
CWE-ID: CWE-94
Exploitation vector: Remote access
Vulnerable software:
Microsoft SharePoint Server

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to improper input validation in Microsoft SharePoint. A remote authenticated attacker can send a specially crafted request and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Install updates from vendor's website.