CVE-2023-36890

Summary

CVE-2023-36890 is a newly disclosed vulnerability affecting Microsoft SharePoint Servers. This issue permits an unauthenticated attacker to gain access to sensitive information through specially crafted SharePoint requests. The vulnerability stems from an information disclosure weakness in the way SharePoint handles certain requests, potentially exposing details that are meant to be restricted. Successful exploitation could lead to significant data leaks, including user data and server configurations. Organizations using SharePoint are advised to apply the available patch promptly to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.