CVE-2023-29357 Microsoft SharePoint Server
Microsoft SharePoint Server contains an unspecified vulnerability that allows an unauthenticated attacker, who has gained access to spoofed JWT authentication tokens, to use them for executing a network attack. This attack bypasses authentication, enabling the attacker to gain administrator privileges.
- CVSS
- not scored
On CISA’s exploited list
Microsoft SharePoint Server Privilege Escalation Vulnerability
- Added
- 2024-01-10
- Federal patch deadline
- 2024-01-31
- Ransomware use
- known