CVE-2023-38177

FAQ

How could an attacker exploit the vulnerability?

An attacker could exploit the vulnerability by exploiting vulnerable APIs through a deserialization of unsafe data input vulnerability. Exploitation of this vulnerability requires that a user access a susceptible API on an affected version of SharePoint with a specially-formatted input file resulting in possible remote code execution on the SharePoint Server.

How could an attacker exploit this vulnerability?

In a network-based attack, an authenticated attacker could execute code remotely within the SharePoint Server.