CVE-2021-43876: Microsoft SharePoint Elevation of Privilege Vulnerability

What privileges are required to exploit this vulnerability?

The attacker must be authenticated to the target site, with the rights to use the SharePoint Migration tool and the ability create a new SharePoint site collection.