Microsoft SharePoint Server Remote Code Execution Vulnerability

How could an attacker exploit the vulnerability? An attacker could exploit the vulnerability by exploiting vulnerable APIs through a deserialization of unsafe data input vulnerability. Exploitation of this vulnerability requires that a user access a susceptible API on an affected version of SharePoint with a specially-formatted input file resulting in possible remote code execution on the SharePoint Server.

How could an attacker exploit this vulnerability? In a network-based attack, an authenticated attacker could execute code remotely within the SharePoint Server.