{"cvss":0.0,"datePublished":"2021-01-21T00:00:00Z","dateUpdated":"2021-01-21T00:00:00Z","description":"An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a variant of cross-site request forgery, CSRF), aka \"Microsoft SharePoint Information Disclosure Vulnerability.\" This affects Microsoft SharePoint.","dueDate":"","id":"CVE-2018-8580","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"SharePoint","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Microsoft SharePoint Exposure of Sensitive Information to an Unauthorized Actor","vendor":"Microsoft"}