CVE-2020-1023
HighCVSS 8.8Exploitation Probability (EPSS)
Very high risk95th percentile - higher than 95% of all known CVEs
Summary
A remote code execution vulnerability in Microsoft SharePoint due to failure to check the source markup of application packages. An attacker could exploit it by uploading a specially crafted SharePoint application package. The update corrects how SharePoint checks source markup.
Risk Assessment
Successful exploitation could allow an attacker to run arbitrary code in the context of the SharePoint application pool and server farm account, potentially leading to full control of the SharePoint server.
Recommendation
Install the latest Microsoft SharePoint security updates to mitigate this vulnerability.
Original NVD description (English source)
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account. Exploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint. The security update addresses the vulnerability by correcting how SharePoint checks the source markup of application packages.