Tagged: CVE-2023-29357

December 16, 2023

PoC Released for SharePoint Pre-Auth RCE Chain (CVE-2023-29357 & CVE-2023-24955)

Two vulnerabilities in Microsoft SharePoint Server have recently come under the spotlight, thanks to the detailed work of STAR Labs researcher Nguyễn Tiến Giang (Jang). In March, at the Pwn2Own...

Penetration Testing

September 26, 2023

CVE-2023-29357: Privilege Escalation with Microsoft SharePoint Server PoC + Exploit

Proof-of-concept (PoC) exploit code has been released for a critical CVE-2023-29357 vulnerability allowing the elevation of privilege without authentication in Microsoft SharePoint Server products. With an alarming CVSS score of...