CVE-2013-1290

CVE-2013-1290 is an information disclosure vulnerability affecting Microsoft SharePoint Server 2013, specifically in configurations using legacy My Sites. Authenticated remote attackers can bypass intended access controls by directly requesting a SharePoint list's location, allowing them to read list items. With a CVSS score of 3.5, this vulnerability is of low severity, requiring user authentication and moderate attack complexity to achieve partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.