CVE-2024-49038: Microsoft Copilot Studio Elevation Of Privilege Vulnerability
9.3
CVSS
Description
Improper neutralization of input during web page generation ('Cross-site Scripting') in Copilot Studio by an unauthorized attacker leads to elevation of privilege over a network.
Classification
CVE ID: CVE-2024-49038
CVSS Base Severity: CRITICAL
CVSS Base Score: 9.3
Affected Products
Vendor: Microsoft
Product: Microsoft Copilot Studio
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.17% (probability of being exploited)
EPSS Percentile: 55.1% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)