Vulnerability detail

Enriched intelligence for a single CVE

9.8

CVSS
Critical

CVE-2023-29357

PUBLISHED

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Exploited in the wild Used in malware Remote Low complexity No user interaction

Microsoft SharePoint Server Elevation of Privilege Vulnerability

cisa malware ransomware nuclei_scanner metasploit microsoft

CVSS v3.1 9.8 Critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Exploited in the wild

Recorded 2024-01-10 00:00:00 UTC · Source

Used in malware

Recorded 2024-01-10 00:00:00 UTC · Source

Catalogues that list this CVE as a known exploited vulnerability.

Source	Added
CISA	Jan 10, 2024

Scanner	Reference	Detected
Metasploit	https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sharepoint_dynamic_proxy_generator_auth_bypass_rce.rb	Apr 28, 2025
Nuclei	https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29357.yaml	Apr 25, 2025

These PoCs are unverified and could contain malware. Use at your own risk.

github · Created 2024-01-01 21:08:22 UTC · 2 stars

A Python script that verifies whether a target is vulnerable to CVE-2023-29357 or not

github · Created 2023-10-10 13:41:21 UTC · 2 stars

Recreation of the SharePoint PoC for CVE-2023-29357 in C# from LuemmelSec

github · Created 2023-09-30 23:17:04 UTC · 52 stars

github · Created 2023-09-26 16:18:41 UTC · 231 stars

Microsoft SharePoint Server Elevation of Privilege Vulnerability