CVE record · 1 source
CVE-2026-123973
CVSS 5.0SharePoint Products CopyMove before 2026-11-06 allows traversal.
- Vendor
- SharePoint Products
- Product
- CopyMove for SharePoint V6, CopyMove for SharePoint 2019
- CVSS v3.1
- 5.0 AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
- Weakness
- CWE-23
- Exposure class
- Collaboration
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
SharePoint Products CopyMove before 2026-11-06 allows traversal.
SharePoint Products CopyMove before 2026-11-06 allows traversal. An authenticated SharePoint user with the necessary permissions to use the ZIP import functionality may exploit a path traversal vulnerability in CopyMove for…