Security Research

CVE-2024-38094 Microsoft SharePoint RCE: unauthenticated remote code execution

Thinking 2024-07-09 4 min read Research Dossier
#Vulnerability Analysis#Code Audit#Web Security
Dark dossier of SharePoint server and RCE entry path

A remote code execution vulnerability in Microsoft SharePoint Server, CVSS 6.3, lets an attacker bypass authentication via a crafted request and execute arbitrary code, affecting a large number of enterprise SharePoint deployments.

Unlock to view this content.