exploit/windows/http/sharepoint_data_deserialization

weaponized

SharePoint DataSet / DataTable Deserialization

view exploit source metasploittype exploitpublished 2020-07-14catalog metasploit
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-1147UShigh7.8OT criticalKEV
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan