M365 Copilot Information Disclosure Vulnerability

Microsoft 365 Copilot fails to properly validate certain user inputs, allowing attackers to access sensitive information through the network without authorization. This vulnerability can expose confidential data that should be protected.

The vulnerability involves insufficient input validation in M365 Copilot's input handling mechanisms, enabling an unauthenticated network-based attacker to extract sensitive information through crafted requests. The improper validation of a specified input type allows bypass of access controls, resulting in unauthorized information disclosure with no user interaction required.