1

It seems as if all SharePoint sites has this vulnerability. If you put anything like {{whatever}} in the url the site returns a 500. I.e

http://www.example.com/{{abc}}

If you perform a lot of requests on such adresses the IIS application running the MMS crashes.

Any ideas how to tackle this? I'm thinking of implementing some IIS UrlRewrite Regex (something like \{\{[^}]*}}) that removes any {{}} and its contents.

Thanks

  • Interesting. but what do you call a lot requests? like thouthads? Within a minute or a day? – Denis Molodtsov May 13 '15 at 11:13
  • @DenisMolodtsov Requests sometimes stack up a bit, this will occasionally cause 10's of requests per second which is enough to cause the issue. – Eric Herlitz May 13 '15 at 11:38
0

The url would crash as { is considered as an unsafe character, check here so for URL with any unsafe character you can always encode it and then use it in your code. you can encode it as var value = SP.Utilities.HttpUtility.htmlEncode(urlString);

  • 1
    Well, external systems and users can still call SharePoint using {{x}} enabling a severe exploit – Eric Herlitz May 13 '15 at 12:27

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.