Microsoft SharePoint Server Elevation of Privilege Vulnerability Exploit (CVE-2023-29357)

In June 2023, Microsoft released a patch for a critical elevation of privilege vulnerability in SharePoint, identified as CVE-2023-29357. An attacker exploiting this flaw could gain administrator-level privileges without requiring any prior authentication. The vulnerability permits attackers to spoof JWT authentication tokens, enabling them to execute a network attack, bypassing authentication processes, and accessing privileges of an authenticated user. It’s imperative to note that this does not necessitate any interaction from the user.

From Discovery to Exploitation: The SharePoint …

a network attack attacker attackers authentication bypassing critical cve cve-2023-29357 elevation of privilege exploit exploiting flaw june june 2023 jwt jwt authentication microsoft microsoft sharepoint network patch privilege privileges server sharepoint spoof tokens vulnerability