A worrying security flaw could have left Microsoft SharePoint users open to attack