CVE-2020-1069
HighCVSS 8.8Exploitation Probability (EPSS)
Very high risk95th percentile - higher than 95% of all known CVEs
Summary
A remote code execution vulnerability in Microsoft SharePoint Server due to failure to properly identify and filter unsafe ASP.Net web controls. An authenticated attacker could exploit it by creating a specially crafted page. The update corrects how SharePoint Server handles processing of created content.
Risk Assessment
Successful exploitation could allow an authenticated attacker to perform actions in the security context of the SharePoint application pool process, potentially leading to unauthorized access or control.
Recommendation
Install the latest Microsoft SharePoint Server security updates to mitigate this vulnerability.
Original NVD description (English source)
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls. An authenticated attacker who successfully exploited the vulnerability could use a specially crafted page to perform actions in the security context of the SharePoint application pool process. To exploit the vulnerability, an authenticated user must create and invoke a specially crafted page on an affected version of Microsoft SharePoint Server. The security update addresses the vulnerability by correcting how Microsoft SharePoint Server handles processing of created content.