CVE-2026-123973

Full vulnerability record from the local CVENow database.

Description

SharePoint Products CopyMove before 2026-11-06 allows traversal. An authenticated SharePoint user with the necessary permissions to use the ZIP import functionality may exploit a path traversal vulnerability in CopyMove for SharePoint 2019 and CopyMove for SharePoint V6 by supplying a crafted ZIP archive. A path traversal vulnerability in the ZIP import functionality of SharePoint Products ApS CopyMove for SharePoint 2019 and CopyMove for SharePoint V6 allows a user with access to the ZIP import functionality to supply a crafted ZIP archive containing malicious entry paths. During extraction, these paths may cause files to be written outside the intended extraction directory. The issue has been addressed by implementing ZIP archive entry path validation to prevent extraction outside the designated directory.

Severity

MEDIUM

CVSS score

5.0 (v3.1)

Vulnerability status

Received

Source identifier

[email protected]

Published

2026-11-06 18:18:05.650000

Last modified

2026-11-06 18:18:05.650000

View original CVE JSON

{
  "id": "CVE-2026-123973",
  "sourceIdentifier": "[email protected]",
  "published": "2026-11-06T18:18:05.650",
  "lastModified": "2026-11-06T18:18:05.650",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "SharePoint Products CopyMove before 2026-11-06 allows traversal. An authenticated SharePoint user with the necessary permissions to use the ZIP import functionality may exploit a path traversal vulnerability in CopyMove for SharePoint 2019 and CopyMove for SharePoint V6 by supplying a crafted ZIP archive. A path traversal vulnerability in the ZIP import functionality of SharePoint Products ApS CopyMove for SharePoint 2019 and CopyMove for SharePoint V6 allows a user with access to the ZIP import functionality to supply a crafted ZIP archive containing malicious entry paths. During extraction, these paths may cause files to be written outside the intended extraction directory. The issue has been addressed by implementing ZIP archive entry path validation to prevent extraction outside the designated directory."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "SharePoint Products",
          "product": "CopyMove for SharePoint V6",
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "programRoutines": [
            {
              "name": "ZIP Import functionality"
            }
          ],
          "versions": [
            {
              "version": "6.0.0.0",
              "lessThan": "6.3.1.2094",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "SharePoint Products",
          "product": "CopyMove for SharePoint 2019",
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "programRoutines": [
            {
              "name": "ZIP Import functionality"
            }
          ],
          "versions": [
            {
              "version": "5.0.0.0",
              "lessThan": "5.2.1.2095",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
          "baseScore": 5.0,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.3,
        "impactScore": 3.6
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-23"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.sharepointproducts.com/security/advisories/zip-slip-2026",
      "source": "[email protected]"
    }
  ]
}