What is GHSA-cpvx-jwgh-3v74?

GHSA-cpvx-jwgh-3v74 is a security advisory published by GitHub Security Advisories with Medium severity. A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to...

Which CVE IDs does GHSA-cpvx-jwgh-3v74 cover?

GHSA-cpvx-jwgh-3v74 covers the following CVE IDs: CVE-2020-1024. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-cpvx-jwgh-3v74?

GHSA-cpvx-jwgh-3v74 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-cpvx-jwgh-3v74MediumCVSS 8.8

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

August 19, 2026

🔗 CVE IDs covered (1)

CVE-2020-1024 →

📋 Description

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1023, CVE-2020-1102.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2020-1024
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1024
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1024
https://github.com/advisories/GHSA-cpvx-jwgh-3v74