Description
An authenticated attacker can bypass Server-Side Request Forgery (SSRF) protection in Microsoft Copilot Studio to leak sensitive information over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft Copilot Studio | N/A | — |
Advisories 2
- NCSC-2024-0337 Kwetsbaarheden verholpen in Microsoft Office NCSC-NL (Netherlands) · Aug 13, 2024
- MSRC-CVE-2024-38206 Microsoft Copilot Studio Information Disclosure Vulnerability Microsoft Security Response Center · Aug 6, 2024
References
- Microsoft Copilot Studio Information Disclosure Vulnerability vendor-advisory