CVE-2021-42320: Microsoft SharePoint Server Spoofing Vulnerability

What privileges are required to exploit this vulnerability?

The attacker must be authenticated to the target site, with the permission to modify their Display Name within SharePoint.