Microsoft CVE-2019-1261: Microsoft SharePoint Spoofing Vulnerability

A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).
To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a cross-site request. The attacker would then need to convince a targeted user to click a link to the malicious page.
The security update addresses the vulnerability by helping to ensure that SharePoint Server properly sanitizes user web requests.