HIGH

CVE-2020-1147

Microsoft .net Core 2020-07-14 CVSS v3.1

CVSS

7.8

KEV

Description

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

Summary dbcve.org

This is a Remote Code Execution vulnerability caused by improper validation of XML input in .NET Framework, SharePoint, and Visual Studio. The software fails to check the source markup of XML files, allowing malicious XML content to be processed. This is a classic XML External Entity (XXE) vulnerability where untrusted XML input is not sanitized before parsing.

Mitigation

Apply the Microsoft security patches released for CVE-2020-1147. Ensure XML parsers in affected applications disable external entity processing and validate XML input against a schema before processing.

Proof of Concept

Patch Commit

EPSS Score

93.97%

Probability of exploitation in next 30 days

99.8th percentile

References

http://packetstormsecurity.com/files/158694/SharePoint-DataSet-DataTable-Deserialization.html Exploit, Third Party Advisory, VDB Entry http://packetstormsecurity.com/files/158876/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry http://packetstormsecurity.com/files/163644/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1147 Patch, Vendor Advisory https://www.exploitalert.com/view-details.html?id=35992 Exploit, Third Party Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1147 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE