SharePoint Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2018-8580 - Vulnerability Database

SharePoint Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2018-8580

Medium
Reference: CVE-2018-8580
Title: SharePoint Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Overview:

An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a variant of cross-site request forgery CSRF) aka quotMicrosoft SharePoint Information Disclosure Vulnerability.quot This affects Microsoft SharePoint.