CVE-2020-1103: 
vulnerability analysis and mitigation

An information disclosure vulnerability (CVE-2020-1103) exists in Microsoft SharePoint Server where certain modes of the search function are vulnerable to cross-site search attacks, which is a variant of cross-site request forgery (CSRF). The vulnerability was disclosed in May 2020 and affects multiple versions of SharePoint, including SharePoint Enterprise Server 2016, SharePoint Foundation 2013 SP1, and SharePoint Server 2019 (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 6.5 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N. The vulnerability is classified under CWE-352 (Cross-Site Request Forgery) and requires user interaction to be exploited. The attack can be executed when users are simultaneously logged into Microsoft SharePoint Server and visit a malicious web page (NVD).

When successfully exploited, this vulnerability allows attackers to induce the browser to invoke search queries as the logged-in user, potentially leading to unauthorized information disclosure. The attack could expose sensitive information through cross-site search attacks (NVD).

The vulnerability requires user interaction, specifically requiring the target user to be simultaneously logged into SharePoint Server while visiting a malicious webpage. The attack can be executed through standard browser functionality (NVD).

Microsoft has released security updates to address this vulnerability. The fixes are available through the May 2020 security updates for affected SharePoint versions including SharePoint Enterprise Server 2016, SharePoint Foundation 2013 SP1, and SharePoint Server 2019 (NVD).