Zero Day Initiative - Exploiting Exchange PowerShell After ProxyNotShell: Part 1 - MultiValuedProperty

"CVE-2022-41040 and CVE-2022-41082 allowed any authenticated Exchange user to achieve remote code execution, with ProxyNotShell exploited prior to Microsoft's patch release."

"The original patch for the path confusion did not resolve the root issue; it merely placed the vulnerability behind authentication, allowing exploitation post-patch."

Read at Zero Day Initiative