Very High
CVE-2023-29357
CVE-2023-29357
Add Assessment
Technical Analysis
CVE-2023-29357 is a critical vulnerability in Microsoft SharePoint Server, classified as an Elevation of Privilege (EoP) flaw. . This vulnerability allows attackers to use spoofed JSON web tokens (JWTs) to gain Administrator privileges on the SharePoint host. The exploit does not require the attacker to have any privileges or for the user to perform any action
The vulnerability was identified by Nguyễn Tiến Giang (Jang) of StarLabs SG and demonstrated at ZDI’s Pwn2Own hacking contest in March 2023. In September 2023, a technical writeup of the flaw and its use in a two-bug exploit chain to achieve pre-authentication remote code execution (RCE) on the SharePoint server was published, along with proof-of-concept (PoC) code demonstrating the attack. Write-up link: https://starlabs.sg/blog/2023/09-sharepoint-pre-auth-rce-chain/
CVSS V3 Severity and Metrics
General Information
Vendors
- microsoft
Products
- sharepoint server 2019
Metasploit Modules
References
Exploit
Additional sources will be added here as they become relevant.
Notes: We will only add the top 3 POCs for a given CVE. POCs added here must have at least 2 GitHub stars.
