CVE-2020-1147

This exploit leverages a .NET deserialization vulnerability in Microsoft SharePoint Server (CVE-2020-1147) to achieve remote code execution. It uses a crafted DataSet payload with a gadget chain to trigger arbitrary command execution via the LosFormatter class.

This exploit leverages a .NET deserialization vulnerability in Microsoft SharePoint Server (CVE-2020-1147) to achieve remote code execution. It uses a crafted DataSet payload with a gadget chain to trigger arbitrary command execution via the LosFormatter class.

This Metasploit module exploits a deserialization vulnerability in SharePoint (CVE-2020-1147) by crafting a malicious DataSet payload to achieve remote code execution. It leverages the TextFormattingRunProperties gadget chain and LosFormatter for deserialization.