CVE-2024-43610: Copilot Studio Information Disclosure Vulnerability
7.4
CVSS
Description
Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector
Classification
CVE ID: CVE-2024-43610
CVSS Base Severity: HIGH
CVSS Base Score: 7.4
Affected Products
Vendor: Microsoft
Product: Microsoft Copilot Studio
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.13% (probability of being exploited)
EPSS Percentile: 48.28% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)