Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-49038

Microsoft Copilot Studio Elevation Of Privilege Vulnerability

Description

Improper neutralization of input during web page generation ('Cross-site Scripting') in Copilot Studio by an unauthorized attacker leads to elevation of privilege over a network.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Microsoft Copilot Studio

  • N/Aaffected

References