CVE-2021-40487: Microsoft SharePoint Server Remote Code Execution Vulnerability

What is the attack vector for this vulnerability?

In a network-based attack, an authenticated attacker can gain access to create a site and could execute code remotely within the SharePoint Server.