Main Vulnerability Database Vulnerabilities #VU49395

Input validation error in Microsoft SharePoint Foundation and Microsoft SharePoint Server - CVE-2021-1707

Published: January 12, 2021

Vulnerability identifier: #VU49395

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-1707

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to insufficient validation of user-supplied input. A remote authenticated attacker can pass specially crafted input to the application and execute arbitrary code on the target system.

Affected software

Microsoft SharePoint Foundation
Microsoft SharePoint Server

How to mitigate CVE-2021-1707

Install updates from vendor's website.

External References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1707

Related Security Bulletins