Microsoft 365 Copilot Business Chat Server-Side Request Forgery Vulnerability Allowing Privilege Escalation

A server-side request forgery (SSRF) vulnerability has been identified in Microsoft 365 Copilot's Business Chat. This vulnerability allows an authorized attacker to elevate privileges over a network. The issue arises from the way the application handles requests on the server side, potentially leading to unauthorized access or manipulation of resources.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain elevated rights or access within the application or network.