Description
Microsoft SharePoint存在不安全的反序列化漏洞。此漏洞是由于对生成自定义工作流的工作流标记文件的输入验证不正确导致的。
Microsoft SharePoint Workflow IsGoodWorkflowCore CVE-2022-44690 不安全的反序列化漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2022-44690
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-44690
https://www.rapid7.com/db/vulnerabilities/msft-cve-2022-44690/
https://www.invicti.com/web-application-vulnerabilities/sharepoint-cve-2022-44690-vulnerability-cve-2022-44690
https://www.acunetix.com/vulnerabilities/web/sharepoint-cve-2022-44690-vulnerability-cve-2022-44690
https://docs.sophos.com/releasenotes/output/en-us/nsg/ipsreleasenotes/7.20.16_s.pdf
https://www.sonicwall.com/blog/microsoft-security-bulletin-coverage-for-december-2022
https://www.cve.org/CVERecord?id=CVE-2022-44690