critical9.3
CVE-2024-49038
Improper neutralization of input during web page generation ('Cross-site Scripting') in Copilot Studio by an unauthorized attacker leads to elevation of privil…
Impact
Improper neutralization of input during web page generation ('Cross-site Scripting') in Copilot Studio by an unauthorized attacker leads to elevation of privilege over a network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Copilot Studio | All versions |