CVE-2023-29357

NVD Published Date: June 14, 2023 at 12:15 AM

NVD Last Modified: June 10, 2024 at 03:25 PM

Download Patch

Vulnerability ID

CVE-2023-29357

Severity

CRITICAL

Severity Score

9.8

Summary

Microsoft SharePoint Server Elevation of Privilege Vulnerability

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29357

Mitigation and Patches

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29357

Exploits

https://github.com/Chocapikk/CVE-2023-29357

https://github.com/LuemmelSec/CVE-2023-29357

https://github.com/Guillaume-Risch/cve-2023-29357-Sharepoint

https://github.com/Chocapikk/CVE-2023-29357

https://github.com/LuemmelSec/CVE-2023-29357

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sharepoint_dynamic_proxy_generator_auth_bypass_rce.rb

https://github.com/Guillaume-Risch/cve-2023-29357-Sharepoint

Metasploit Payload

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE ID

NVD-CWE-noinfo

Recent Publish

Security Update for Microsoft Project 2016 (KB5002561) 64-Bit Edition

Security Update for Microsoft Project 2016 (KB5002561) 32-Bit Edition

Security Update for Microsoft Office 2016 (KB5002570) 32-Bit Edition

Security Update for Microsoft Office 2016 (KB5002570) 64-Bit Edition

Security Update for Microsoft PowerPoint 2016 (KB5002586) 64-Bit Edition

Security Update for Microsoft PowerPoint 2016 (KB5002586) 32-Bit Edition

See SecOps Solution
in action

Schedule Demo

Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions

CVE-2023-29357

Recent Publish

See SecOps Solution
in action

Products

Compare

Company

Resources

Try It

CVE-2023-29357

Recent Publish

See SecOps Solutionin action

Products

Compare

Company

Resources

Try It

See SecOps Solution
in action