Description
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft SharePoint Server 2019 | 16.0.0 – < 16.0.10399.20005 | 16.0.10399.20005 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Sharepoint Dynamic Proxy Generator Unauth RCE
exploit/windows/http/sharepoint_dynamic_proxy_generator_auth_bypass_rce
GitHub 9 repositories
-
Chocapikk/CVE-2023-29357 ★ 236 · Sep 26, 2023
Microsoft SharePoint Server Elevation of Privilege Vulnerability
-
LuemmelSec/CVE-2023-29357 ★ 55 · Sep 30, 2023
-
Guillaume-Risch/cve-2023-29357-Sharepoint ★ 4 · Dec 22, 2023
-
KeyStrOke95/CVE-2023-29357-ExE ★ 2 · Oct 10, 2023
Recreation of the SharePoint PoC for CVE-2023-29357 in C# from LuemmelSec
-
Zedocun/Sharepoint-cve-2023-29357-incident-response ★ 1 · Jul 29, 2026
End-to-end SOC incident analysis and threat hunting playbook targeting Microsoft SharePoint privilege escalation (CVE-2023-29357) using SIEM logs, firewall data, and threat intel. LetsDefend lab scen…
-
Jev1337/CVE-2023-29357-Check ★ 1 · Jan 1, 2024
A Python script that verifies whether a target is vulnerable to CVE-2023-29357 or not
-
DonVorrin/CVE-2023-29357 ★ 0 · Apr 13, 2026
-
AhmedMansour93/Event-ID-189-Rule-Name-SOC227-CVE-2023-29357 ★ 0 · Sep 12, 2024
Event ID 189 Rule Name SOC227 Microsoft SharePoint Server Elevation of Privilege Possible CVE-2023-29357 .. Exploitation
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Microsoft SharePoint - Authentication Bypass http/cves/2023/CVE-2023-29357.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 2
- WID-SEC-2023-1443 Microsoft Office: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 11, 2024
- MSRC-CVE-2023-29357 Microsoft SharePoint Server Elevation of Privilege Vulnerability Microsoft Security Response Center · Jun 19, 2023
References
- Microsoft SharePoint Server Elevation of Privilege Vulnerability vendor-advisory