CVE-2024-49038 — Microsoft Copilot Studio Elevation Of Privilege Vulnerability
Improper neutralization of input during web page generation ('Cross-site Scripting') in Copilot Studio by an unauthorized attacker leads to elevation of privilege over a network.
Published: 2024-11-26 · CVSS: 9.3 · CVSS 3.1
Improper neutralization of input during web page generation ('Cross-site Scripting') in Copilot Studio by an unauthorized attacker leads to elevation of privilege over a network.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7