Description

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0920, CVE-2020-0929, CVE-2020-0932, CVE-2020-0971, CVE-2020-0974.

Remediation

References

CVE-2020-0931

Related Vulnerabilities

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-5099)

WordPress Plugin Data Tables Generator by Supsystic Cross-Site Scripting (1.10.0)

SugarCRM Incomplete List of Disallowed Inputs Vulnerability (CVE-2015-5946)

Moodle Uncontrolled Resource Consumption Vulnerability (CVE-2020-25630)

ownCloud Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-44537)

Severity

High

Classification

CVE-2020-0931 CWE-434 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities