CVE-2024-38206

🗓️ 06 Aug 2024 21:38:19Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 134 Views

An attacker can bypass Server-Side Request Forgery (SSRF) protection in Microsoft Copilot Studio to leak sensitive information over a network

Reporter	Title	Published	Views	Family All 16
BDU FSTEC	Microsoft Copilot Studio SSRF	23 Aug 202400:00	–	bdu_fstec
Circl	CVE-2024-38206	7 Aug 202401:04	–	circl
CNNVD	Microsoft Copilot Studio code-related vulnerabilities	6 Aug 202400:00	–	cnnvd
Cvelist	CVE-2024-38206 Microsoft Copilot Studio Information Disclosure Vulnerability	6 Aug 202421:38	–	cvelist
EUVD	EUVD-2024-37173	3 Oct 202520:07	–	euvd
Kaspersky	KLA71412 OSI vulnerability in Microsoft Office	6 Aug 202400:00	–	kaspersky
Microsoft CVE	Microsoft Copilot Studio Information Disclosure Vulnerability	6 Aug 202407:00	–	mscve
NCSC	Vulnerabilities fixed in Microsoft Office	13 Aug 202418:21	–	ncsc
NVD	CVE-2024-38206	6 Aug 202422:15	–	nvd
Positive Technologies	PT-2024-5726	6 Aug 202400:00	–	ptsecurity

NVD

CNA

Node

microsoft copilot_studioMatch-

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft Copilot Studio",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "N/A",
        "status": "affected"
      }
    ]
  }
]