Netskope Threat Labs

SERVER-WEBAPP Microsoft SharePoint authenticated remote code execution attempt

IPS-NPA

3 SIDs: 57548, 63424, 65955

Description

Detects an attempt to exploit CVE-2021-31181, and CVE-2024-30044, a remote code execution flaw that can run code on the server in Microsoft SharePoint authenticated.

CVEs

CVE-2021-31181CVE-2024-30044

Related malware families

Microsoft

References