An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a variant of cross-site request forgery, CSRF).When users are simultaneously logged in to Microsoft SharePoint Server and visit a malicious web page, the attacker can, through standard browser functionality, induce the browser to invoke search queries as the logged in user, aka 'Microsoft SharePoint Information Disclosure Vulnerability'.
References
Link | Resource |
---|---|
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1103 | Patch Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: microsoft
Published: 2020-05-21T22:53:08
Updated: 2020-05-21T22:53:07
Reserved: 2019-11-04T00:00:00
Link: CVE-2020-1103
JSON object: View
NVD Information
Status : Analyzed
Published: 2020-05-21T23:15:14.477
Modified: 2021-07-21T11:39:23.747
Link: CVE-2020-1103
JSON object: View
Redhat Information
No data.
CWE