{"cvss":7.2,"datePublished":"2024-03-26","dateUpdated":"2024-03-26","description":"Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.","dueDate":"2024-04-16","id":"CVE-2023-24955","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24955;  https://nvd.nist.gov/vuln/detail/CVE-2023-24955","product":"SharePoint Server","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"HIGH","source":"cisa_known_exploited","title":"Microsoft SharePoint Server Code Injection Vulnerability","vendor":"Microsoft"}