CVE-2023-33132

Deeper analysis

Microsoft SharePoint Server is affected by CVE-2023-33132, a spoofing vulnerability that carries a CVSS 3.1 score of 6.3. The flaw is associated with CWE-79 and permits an attacker to present falsified content or capture sensitive data through the server interface.

An authenticated user with low privileges can exploit the issue over the network by crafting input that requires a victim to interact with a malicious link or page. Successful exploitation yields high confidentiality impact and limited integrity effects, allowing the attacker to spoof content or obtain information the victim would otherwise not disclose.

The EPSS score for this CVE remained low for an extended period after the June 2023 disclosure but rose materially to a peak of 0.0762 on 2025-01-22 before receding to the current value of 0.0030, indicating a later surge in exploitation interest. Security practitioners should consult the Microsoft Security Response Center advisory at the referenced URL for official patch and mitigation guidance.