Microsoft 365 Copilot BizChat Information Disclosure Vulnerability
Vulnerability
A vulnerability allowing information disclosure has been identified in Microsoft 365 Copilot's Business Chat. This issue arises from improper neutralization of special elements used in a command, potentially leading to command injection.
Impact
Exploitation of this vulnerability could result in unauthorized information disclosure.
Added: Aug 7, 2025, 9:24 PM
Updated: Aug 7, 2025, 9:40 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
7.4remediation
0.0relevance
0.3threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.