Jörn Ahrens

**Name of the Vulnerable Software and Affected Versions** Microsoft SharePoint Foundation 2013 SP1 SharePoint Server (affected versions not specified) **Description** The issue arises when the software does not properly sanitize a specially crafted web request, allowing an elevation of privilege. An authenticated attacker could exploit this by sending a specially crafted request to an affected server, potentially leading to cross-site scripting attacks. These attacks could enable the attacker to read unauthorized content, use the victim's identity to take actions on the site, and inject malicious content into the victim's browser. **Recommendations** For Microsoft SharePoint Foundation 2013 SP1, update to a version that includes the fix for this issue. For SharePoint Server, apply the necessary security patches to resolve the vulnerability. As a temporary workaround, consider restricting access to sensitive areas of the SharePoint site to minimize the risk of exploitation.