ZDI-23-1580: (0Day) Microsoft Exchange DownloadDataFromOfficeMarketPlace Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.1.

0day attackers authentication cvss disclosure exchange exploit forgery information information disclosure information disclosure vulnerability microsoft microsoft exchange rating request sensitive sensitive information server server-side request forgery vulnerability zdi