A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.Referenceshttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0646http://packetstormsecurity.com/files/156930/SharePoint-Workflows-XOML-Injection.html