writeups.xyz / CVE-2021-27076: A Replay-style Deserialization Attack Against Sharepoint

Submitter : c2a

Date: 17 March 2021

Bounty : undisclosed

Vulnerabilities :

• Insecure Deserialization
• RCE

Programs :

• Microsoft

Authors :

• Simon Zuckerbraun (@HexKitchen)

Link :
https://www.thezdi.com/blog/2021/3/17/cve-2021-27076-a-replay-style-deserialization-attack-against-sharepoint