Product
A publicly available exploit for CVE-2024-30043 allows unauthenticated remote attackers to perform XML External Entity (XXE) injection against Microsoft SharePoint Server via URL parsing confusion, potentially leading to sensitive data disclosure.