Skip to content
OpenAdvisories
Unscored CVE-2019-1261 EUVD-2019-9826GHSA-cpgg-76rc-452r

A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-s…

Published Sep 11, 2019 · Updated Aug 4, 2024 · Assigned by microsoft

Description

A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a cross-site request, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-1259.

Affected products

VendorProductAffectedFixed
Microsoft Microsoft SharePoint Foundation 2013 Service Pack 1 —
Microsoft Microsoft SharePoint Enterprise Server 2016 —
Microsoft Microsoft SharePoint Server 2019 —

References