Description
Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned workflows, which allows remote attackers to cause a denial of service (W3WP process hang) via a crafted URL, aka "SharePoint Denial of Service Vulnerability."
Remediation
References
Related Vulnerabilities
WordPress Plugin Rate my Post-WP Rating System Cross-Site Scripting (3.3.8)
WordPress Plugin S3 Video Cross-Site Scripting (0.982)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-46731)
Apache Tomcat Deserialization of Untrusted Data Vulnerability (CVE-2025-24813)