CVE-2023-36892

Deeper analysis

Microsoft SharePoint Server is affected by CVE-2023-36892, a spoofing vulnerability that carries a CVSS 3.1 score of 8.0. The weakness is tracked under CWE-79 and permits an attacker to present falsified content or actions to users of the server.

An authenticated attacker with low privileges can exploit the flaw over the network by crafting a request that requires user interaction; successful exploitation yields high impact on confidentiality, integrity, and availability because the spoofed content executes in the context of the targeted user.

Microsoft’s security advisory at the referenced MSRC update guide supplies mitigation guidance, including available patches and configuration steps for affected SharePoint Server installations.

The associated EPSS score rose materially from a low baseline to a peak of 0.0741 on 2025-01-22 before receding to its current value of 0.0026, indicating that exploitation interest surfaced after public disclosure.