Lucene search

CVE-2020-10146

🗓️ 09 Dec 2020 01:12:15Reported by certccType

Microsoft Teams online stored XSS vulnerability in displayName parameter

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 3
Cvelist	CVE-2020-10146 Microsoft Teams displayName stored cross-site scripting vulnerability	9 Dec 202000:30	–	cvelist
NVD	CVE-2020-10146	9 Dec 202001:15	–	nvd
Prion	Cross site scripting	9 Dec 202001:15	–	prion

Nvd

Node

microsoft teamsRange<2020-10-29

[
  {
    "product": "Teams",
    "vendor": "Microsoft",
    "versions": [
      {
        "lessThan": "on or about October 2020",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/oskarsve/ms-teams-rce

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Dec 2020 01:15Current

5.8Medium risk

Vulners AI Score5.8

CVSS23.5

CVSS35.4 - 5.7

EPSS0.00514

CWE-79