Authenticated spoofing via improper input validation

Spoofing in Microsoft Office SharePoint allows remote authenticated users to misrepresent trusted SharePoint content via crafted requests. Microsoft and NVD describe improper input validation, but retrieved public records do not identify the specific request field, page, or handler that accepts untrusted data and produces the spoofed result. Exploitation is network-reachable but requires valid credentials and user interaction per the published CVSS 3.1 vector, and the published impact is limited to low confidentiality and integrity effects with no availability loss.