writeups.xyz / [P2O Vancouver 2023] SharePoint Pre-Auth RCE chain (CVE-2023–29357 & CVE-2023–24955)

Submitter : c2a

Date: 25 September 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• Authentication Bypass
• JWT
• Code Injection
• Security Code Review

Programs :

• Microsoft (Sharepoint)

Authors :

• Nguyễn Tiến Giang (@Testanull)

Link :
https://starlabs.sg/blog/2023/09-sharepoint-pre-auth-rce-chain/