Description

Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned workflows, which allows remote attackers to cause a denial of service (W3WP process hang) via a crafted URL, aka "SharePoint Denial of Service Vulnerability."

Remediation

References

CVE-2013-0081

Related Vulnerabilities

WordPress Plugin LearnPress-WordPress LMS Cross-Site Scripting (4.1.3.1)

WordPress Plugin Google Drive for WordPress Arbitrary File Deletion (2.2)

Envoy Proxy Reachable Assertion Vulnerability (CVE-2022-29228)

WordPress Plugin Calendar by WD-Responsive Event Calendar for WordPress SQL Injection (1.5.51)

CrushFTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-14036)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2013-0081