Description

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1295, CVE-2019-1296.

Remediation

References

CVE-2019-1257

Related Vulnerabilities

WordPress Plugin WP Coder-add custom html, css and js code Cross-Site Request Forgery (2.5.1)

WordPress Plugin RB Agency Local File Disclosure (2.4.7)

WordPress Plugin Happy Addons for Elementor Pro Cross-Site Scripting (1.16.0)

Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-5647)

Sqlite Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-6607)

Severity

High

Classification

CVE-2019-1257 CWE-20 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities