{"uuid": "b943e4d0-f563-438c-84bb-dcc9448b2cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24955", "type": "exploited", "source": "https://t.me/theninjaway1337/1494", "content": "CISA tags Microsoft SharePoint RCE bug as actively exploited\n\nCISA warns\u00a0that attackers are now exploiting a Microsoft SharePoint code injection vulnerability that can be chained with a critical privilege escalation flaw for pre-auth remote code execution attacks.\nTracked as\u00a0CVE-2023-24955, this SharePoint Server vulnerability enables authenticated attackers with Site Owner privileges to execute code remotely on vulnerable servers.\n\nhttps://www.bleepingcomputer.com/news/security/cisa-tags-microsoft-sharepoint-rce-bug-as-actively-exploited/", "creation_timestamp": "2024-03-28T17:09:30.000000Z"}