CVE-2024-49038

Publication date

2024-11-26 19:43:35

Family

microsoft

State

PUBLISHED

Description

Improper neutralization of input during web page generation (Cross-site Scripting) in Copilot Studio by an unauthorized attacker leads to elevation of privilege over a network.