Severity
Low
Analysis Summary
CVE-2023-23395
Microsoft SharePoint could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability. An attacker could exploit this vulnerability using a specially-crafted URL to redirect a victim to arbitrary Web sites.
Impact
- Gain Access
Indicators Of Compromise
CVE
- CVE-2023-23395
Affected Vendors
Microsoft
Affected Products
- Microsoft SharePoint Foundation 2013 SP1
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition
Remediation
Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.