Authenticated file disclosure via relative path traversal

Relative path traversal in Microsoft SharePoint Server 16.0 allows remote authenticated users to read sensitive files over the network. Microsoft has not disclosed the affected request handler or how it fails to normalize or constrain attacker-controlled relative paths before file access. Low-privilege authentication is required, no user interaction is needed, and the reported consequence is confidentiality loss without data modification or service interruption.