Sign In
- Platform
- Solutions
- Modern NDR
- Resources
- Company
Platform
Modern NDR
Resources
Platform
Modern NDR
Resources
DETECTION OVERVIEW
Risk Factors
An authenticated attacker with the ability to upload files to a personal or shared folder on a SharePoint server could upload a web shell and directly run malicious code on the SharePoint server. Running web shells or other code is dependent on which SharePoint mitigations are configured, such as support for running code-blocks.
Kill Chain
Risk Score
83
Microsoft SharePoint has a vulnerability in how it processes incoming HTTP requests without validating URL parameters. An attacker could create an HTTP request with a specially designed URI for a file on a SharePoint server, resulting in remote code execution (RCE).
Install patches for relevant versions
