Immunity, Inc.
Name sharepoint_workflows_rce
CVE CVE-2020-0646
Exploit Pack CANVAS
Descriptionsharepoint_workflows_rce
NotesCVE Name: CVE-2020-0646
VENDOR: Microsoft
NOTES: This exploit has been tested on Sharepoint 2019, but other version could be affected.

VersionsAffected: VERSIONS
Repeatability: Infinite
References: https://www.mdsec.co.uk/2020/01/code-injection-in-workflows-leading-to-sharepoint-rce-cve-2020-0646/
CVE Url: https://nvd.nist.gov/vuln/detail/cve-2020-0646
Date public: 01/14/2020
CVSS: 9.8

Learn more about the CANVAS Exploit Pack here: CANVAS