SharePoint security fixes released with April 2020 PU and offered through Microsoft Update

17 Comments

1. 

   Samir
   On 20. April 2020 Permalink

   Has anyone seen a strange issue related to your Lists only? We’re seeing behavior where, user even with full permission, when you select an item, the “Edit Item”, “View Item” and other icons remain grayed out except “New Item”. If you have read permission, and you select an item, the “View Item” on Ribbon is enabled. If you give contribute permission, all icons are grayed except “New Item”. Created new list, view, sites and this issue remains same. We have 4 farms, and behavior is exactly same on all 4 SharePoint 2010.

   Reply
   1. 

      Stefan Goßner
      On 21. April 2020 Permalink

      Hi Sami, this is a known issue. If you check the KB article you will find a note in the “Known issues” section of the KB article.
      A fix for this issue is currently in development.

      Reply
      1. 

         Samir
         On 21. April 2020 Permalink

         Thanks Stefan. When I posted this, the “known issue” wasn’t posted yet.

         Reply
2. 

   Kenny Stevenson
   On 20. April 2020 Permalink

   We are seeing similar. Clicking the context menu of a list item displays a yellow “Loading…” but no progress. Using dev tools indicates an undefined variable which I think is a typo on line 7262 of core.debug.js

   I think

   strAction="EditItemWithCheckoutAlert(event, '"+ctxt.editFormUrl+strSeperator+"ID="+currentItemID+ contentTypeParam;


   should be

   strAction="EditItemWithCheckoutAlert(event, '"+ctx.editFormUrl+strSeperator+"ID="+currentItemID+ contentTypeParam;


   and changing it makes the context menu work again

   Reply
   1. 

      Stefan Goßner
      On 21. April 2020 Permalink

      Hi Kenny,
      if you are using this approach ensure to create a copy of any files changed in this directory and replace the file with the original one before applying further updates to ensure that further updates can correctly update the files.
      Cheers,
      Stefan

      Reply
   2. 

      Samir
      On 21. April 2020 Permalink

      Kenny,

      Thanks. I was able to fix it for now, but error on our side was core.js, line 2, 127454. I changed .ctxt to .ctx. Of course after making a copy of the file. IISreset and context menu worked.

      Reply
      1. 

         Kenny Stevenson
         On 23. April 2020 Permalink

         Hi Samir,

         Glad to hear to you managed to get a fix for now. Sorry I planned to update to say that I’d had to change 4 instances in the end but my post didn’t appear. In the end 2 instances in core.js and 2 in core.debug.js

         Rather strangely the paste in my post is even the wrong piece of code (though line number was correct for us) the edit should have been

         strAction=”EditItem2(event, ‘”+STSScriptEncode(ctxt.editFormUrl)+strSeperator+ “ID=”+currentItemID+contentTypeParam+”‘)”;

         to

         strAction=”EditItem2(event, ‘”+STSScriptEncode(ctx.editFormUrl)+strSeperator+ “ID=”+currentItemID+contentTypeParam+”‘)”;

         Anyway, hopefully Microsoft will issue a replacement patch soon.

         Reply
3. 

   Ondrej Pasch
   On 21. April 2020 Permalink

   Yes, I have the same issue described by Samir. Including issue, when you try to open context menu.. stull loading.. In the background the page says “object ctxt not defined”. Is there any fix from Microsoft? The issue is related only to LISTs. Library’s context menu and Ribbon work with no issue.

   Reply
   1. 

      Stefan Goßner
      On 21. April 2020 Permalink

      Hi Ondreij, as mentioned above this is a known issue. If you check the KB article you will find a note in the “Known issues” section of the KB article.
      A fix for this issue is currently in development.

      Reply
      1. 

         Ondrej Pasch
         On 22. April 2020 Permalink

         Hi, I work for more clients and one of them still has older update installed, I finally found out that until previous update the files core.js and core.debug.js were not changed since the SharePoint 2010 foundation was installed. They have been changed in the very last update.
         So I copied both files from the client’s installation and the issue has been resolved and all seems to be working fine.
         Files are located at C:\Program Files\Common Files\microsoft shared\Web Server Extensions\14\TEMPLATE\LAYOUTS\1029

         Reply
         1. 

            Stefan Goßner
            On 22. April 2020 Permalink

            Copying a file from an older patch level is unsupported as it means you have a file mix from different versions on your box.
            I would recommend to restore the versions applied by the fix. If you see a need to modify the file, create a backup of the latest version and apply the single character change suggested in other threads here in the comments.

            Reply
4. 

   Vinny G.
   On 21. April 2020 Permalink

   Hi Stefan, can you notify us here when the patch becomes available? We have deployed this April CU across all of our SharePoint servers and customers are already starting to complain.

   Reply
   1. 

      Stefan Goßner
      On 22. April 2020 Permalink

      Hi Vinny, I will post an update on my blog as soon as the fix is available.

      Reply
      1. 

         Vinny G.
         On 22. April 2020 Permalink

         Excellent, thank you =)

         Reply
5. 

   Ondrej Pasch
   On 22. April 2020 Permalink

   Look at my reply to Stefan to my previous post. Hope it helps. I have no chance to share both files, maybe Stefan has.

   Reply
6. 

   Stefan Goßner
   On 27. April 2020 Permalink

   The fix for the SP2010 issue which affects context menu for list items has just been released. Please apply it on each affected SharePoint Foundation 2010, SharePoint Server 2010 or Project Server 2010 server:

   https://support.microsoft.com/en-us/help/4484386/april-27-2020-update-for-sharepoint-foundation-2010-kb4484386

   Reply
   1. 

      Vinny G.
      On 27. April 2020 Permalink

      Score! Thank you!

      Reply