CVE-2020-1200

CVE-2020-1200 is a remote code execution vulnerability in Microsoft SharePoint (Enterprise Server, Foundation, and Server) that arises from insufficient validation of application package source markup. An unauthenticated attacker could exploit this by uploading a specially crafted SharePoint application package, leading to arbitrary code execution in the context of the SharePoint application pool and server farm account. This vulnerability has a high CVSS score of 8.6, indicating a severe risk with a network attack vector and low attack complexity. Successful exploitation could result in significant impact to confidentiality, integrity, and availability. While there is no evidence of active exploitation (not in KEV or Hot List) and no public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability garnered substantial community discussion and media coverage at the time of its disclosure.