CVE-2014-2816 Microsoft SharePoint Server 2013 Gold and SP1 and SharePoint Foundation 2013 Gold and SP1 allow remote authenticated users to gain privileges via a Trojan horse app that executes a custom action in th...
HighCVSS 9.3
EPSS 16.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft SharePoint Server 2013 Gold and SP1 and SharePoint Foundation 2013 Gold and SP1 allow remote authenticated users to gain privileges via a Trojan horse app that executes a custom action in the context of the SharePoint extensibility model, aka "SharePoint Page Content Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft sharepoint foundation | = 2013 | No fix listed |
| Microsoft sharepoint foundation | = 2013-sp1 | No fix listed |
| Microsoft sharepoint server | = 2013 | No fix listed |
| Microsoft sharepoint server | = 2013-sp1 | No fix listed |