writeups.xyz / Insertion Of Malicious Links For Execution In Profile Picture - Unvalidated User Input In MS Sharepoint 2019 (CVE-2020-1456)

Submitter : c2a

Date: 15 January 2021

Bounty : undisclosed

Vulnerabilities :

• XSS

Programs :

• Microsoft

Authors :

• David (@Slashcrypto)
• User_x73x76x6E

Link :
https://slashcrypto.org/2021/01/15/CVE-2020-1456/