CVE-2020-10146mediumCWE-79

CVE-2020-10146: fallo de gravedad media en Microsoft Teams

Microsoft Teams displayName stored cross-site scripting vulnerability

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Microsoft Teams

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.7epss 2.3%
The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter that can be exploited on Teams clients to obtain sensitive information such as authentication tokens and to possibly execute arbitrary commands. This vulnerability was fixed for all Teams users in the online service on or around October 2020.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Productos afectados
Microsoft · Teams