CISA Adds Microsoft SharePoint Server Vulnerability CVE-2023-29357 to Known Exploited Vulnerabilities Catalog

CISA KEV Listing

On 2024-01-10, CISA added CVE-2023-29357 to the Known Exploited Vulnerabilities () catalog for Microsoft SharePoint Server ^[2].

Original Technical Description

Microsoft SharePoint Server contains an unspecified vulnerability that allows an unauthenticated attacker, who has gained access to spoofed JWT authentication tokens, to use them for executing a network attack. This attack bypasses authentication, enabling the attacker to gain administrator privileges. ^[2]

Official Requirements

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. ^[2]

Individual Vulnerability Record

The U.S. National Vulnerability Database (NVD) provides an independent vulnerability record and description for CVE-2023-29357 ^[1].