SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

A SharePoint Server vulnerability that Microsoft initially classified as a spoofing flaw with a CVSS score of 65 actually enables authenticated remote code execution according to full technical details published today by Viettel Cyber Security researcher Dinh Ho Anh Khoa The flaw CVE202665660 affects SharePoint Server 2016 2019 and Subscription Edition Patches have been