FAQ
What type of information could be disclosed by this vulnerability? This vulnerability could disclose sensitive information, which might include a user's full trust token.
MSRC compact vulnerability detail
CVE-2023-24881 · Microsoft Teams Information Disclosure Vulnerability
No description was published by MSRC.
Signals
Microsoft Teams
Information Disclosure
Exploited: No
Publicly disclosed: No
Exploitability: Exploitation Less Likely
CWE
Patch Diff
Loading module diff metadata...
Resolved binary override
Use this when the MSRC module name cannot be mapped automatically or the resolved binary looks wrong.
Description
No description was published by MSRC.
FAQ / Articles
FAQ
How could an attacker exploit the vulnerability? In a network-based attack, an attacker could host a site containing malicious code. When a target accesses that site, it could force open a full trust application and potentially obtain a user's full trust token.
FAQ
According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do? Exploitation of the vulnerability requires that a user navigate to a malicious site hosted on *.sharepoint.com.