Description
Improper neutralization of input during web page generation ('Cross-site Scripting') in Copilot Studio by an unauthorized attacker leads to elevation of privilege over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft Copilot Studio | N/A | — |
Advisories 1
- MSRC-CVE-2024-49038 Microsoft Copilot Studio Elevation Of Privilege Vulnerability Microsoft Security Response Center · Nov 26, 2024
References
- Microsoft Copilot Studio Elevation Of Privilege Vulnerability vendor-advisory