CVE-2017-11876

CVE-2017-11876 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Microsoft Project Server and SharePoint Enterprise Server 2016. This flaw allows an attacker to read unauthorized content, perform actions on behalf of the victim (like changing permissions or deleting content), and inject malicious content into the victim's browser. With a CVSS score of 8.8 (High), this vulnerability is easily exploitable over the network with low attack complexity, leading to high impacts on confidentiality, integrity, and availability. While there is no known active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has received some community discussion and media coverage, indicating awareness within the security community.