Total vulnerabilities in the database
An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a variant of cross-site request forgery, CSRF).When users are simultaneously logged in to Microsoft SharePoint Server and visit a malicious web page, the attacker can, through standard browser functionality, induce the browser to invoke search queries as the logged in user, aka 'Microsoft SharePoint Information Disclosure Vulnerability'.
| Software | From | Fixed in |
|---|---|---|
| microsoft / sharepoint_foundation | 2013-sp1 | 2013-sp1.x |
| microsoft / sharepoint_enterprise_server | 2016 | 2016.x |
| microsoft / sharepoint_server | 2019 | 2019.x |