CVE-2023-29357

Microsoft SharePoint Server Elevation of Privilege Vulnerability

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

99.98% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2024-01-10, used in ransomware campaigns

Nuclei

critical

Published

2023-06-13

Updated

2025-10-21

Proof-of-concept exploits (6)

• Chocapikk/CVE-2023-29357238★ · 2023-09-26
• DeividasTerechovas/SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE…0★ · 2025-04-01
• Guillaume-Risch/cve-2023-29357-Sharepoint4★ · 2023-12-22
• KeyStrOke95/CVE-2023-29357-ExE2★ · 2023-10-10
• LuemmelSec/CVE-2023-2935755★ · 2023-10-10
• DonVorrin/CVE-2023-29357

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29357.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sharepoint_dynamic_…

Exploit collections (1)

• zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2023/CVE-2023-29357.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2024-49138
• CVE-2017-6971
• CVE-2025-59287
• CVE-2021-32789
• CVE-2023-29343
• CVE-2023-29360