Product:
Microsoft Office SharePoint
Summary
Server-side request forgery in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. This vulnerability can lead to unauthorized access to sensitive information. It is important for users to be aware of the potential risks associated with this issue.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.4 | CVE-2026-20958 |
Exploitation
To exploit this vulnerability, an attacker with authorized access can craft specific requests that manipulate the server’s behavior. By sending these requests, the attacker can retrieve sensitive information from the network that should not be accessible. This requires low privileges and no user interaction, making it easier for attackers to execute.
Affected Products
- Microsoft Office SharePoint: Affected by server-side request forgery, allowing information disclosure over the network.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Users should also review their access controls and ensure that only authorized personnel have access to sensitive information. Regular security assessments can help identify and address potential vulnerabilities.