SharePoint Open Redirect Vulnerability

<p>An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.</p> <p>To exploit the vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link. When an authenticated SharePoint user clicks the link, the authenticated user's browser session could be redirected to a malicious site that is designed to impersonate a legitimate website. By doing so, the attacker could trick the user and potentially acquire sensitive information, such as the user's credentials.</p> <p>The update addresses the vulnerability by correcting how SharePoint handles open redirect requests.</p>

Where it's fixed