CVE-2019-1261: microsoft microsoft sharepoint enterprise server Cross-Site Request Forgery (CSRF)

Vulnerability summary

CVE-2019-1261 is a high (CVSS 8.8) Cross-Site Request Forgery (CSRF) vulnerability in microsoft microsoft sharepoint enterprise server. EPSS estimates a 1.55% chance of exploitation in the next 30 days, higher than 74.7% of scored vulnerabilities.

Timeline

1. 11-09-2019
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a cross-site request, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-1259.

• CWE-352Cross-Site Request Forgery (CSRF)The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.