Description

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.

Remediation

References

CVE-2019-0604

Related Vulnerabilities

Drupal Core 8.x Security Bypass (8.0.0 - 8.1.2)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1916)

WordPress Plugin Booking Calendar-Appointment Booking-BookIt Unspecified Vulnerability (2.3.8)

XWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-32731)

WordPress Plugin Couponer 'print-coupon.php' SQL Injection (1.2)

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2019-0604