CVE-2021-42316: Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability

What is the attack vector for this vulnerability?

An attacker can write to any file where the webserver user (nt authority\network service) has write access.