| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| CVE-2024-38206 | Microsoft Copilot Studio Information Disclosure Vulnerability | Microsoft Copilot Studio | Critical | 10-09-2024 |
Technical Information
An authenticated attacker can bypass Microsoft Copilot Studio’s Server-Side Request Forgery protection to leak sensitive information over a network.
Patch release date: Aug 13, 2024
Further information on this vulnerability is available at : CVE-2024-38206