CVE-2024-49038 Microsoft Copilot Studio Elevation Of Privilege Vulnerability
Posted on Tuesday November 26, 2024
Improper neutralization of input during web page generation ('Cross-site Scripting') in Copilot Studio by an unauthorized attacker leads to elevation of privilege over a network.