ZDI-CAN-21201: ZDI-23-1282: Microsoft Teams Pluginhost Prototype Pollution Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of Microsoft Teams. An attacker must first obtain the ability to execute script within the application window in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-21201?
The severity of ZDI-CAN-21201 is categorized as high due to potential privilege escalation.
How do I fix ZDI-CAN-21201?
To fix ZDI-CAN-21201, ensure that you are running the latest version of Microsoft Teams with all security patches applied.
What impact does ZDI-CAN-21201 have on Microsoft Teams users?
ZDI-CAN-21201 allows remote attackers to escalate privileges, potentially leading to unauthorized access within the Microsoft Teams environment.
Who can exploit ZDI-CAN-21201?
ZDI-CAN-21201 can be exploited by remote attackers who can execute scripts within the application window of affected Microsoft Teams installations.
Is user interaction required for ZDI-CAN-21201 exploitation?
Yes, user interaction is required for ZDI-CAN-21201 exploitation as the attacker must first execute a script in the Microsoft Teams application.