CVE-2024-21374

CWE-20 — Improper Input Validation4 documents4 sources
Severity
5.0MEDIUM
EPSS
1.5%
top 18.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft Microsoft Teams FOR AndroidMicrosoft Teams
Timeline
PublishedFeb 13

Description

Microsoft Teams for Android Information Disclosure Vulnerability

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:NExploitability: 1.3 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5microsoft/microsoft_teams_for_android1.0.0 — 1.0.0.2024022302
▶NVDmicrosoft/teams< 1.0.0.2024022302

Patches

Patch: msrc.microsoft.com ↗Patch: msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-r7jr-h86x-vvx4: Microsoft Teams for Android Information Disclosure↗2024-02-13
▶
CVEList
Microsoft Teams for Android Information Disclosure Vulnerability↗2024-02-13
▶

📋Vendor Advisories

1
Microsoft
Microsoft Teams for Android Information Disclosure Vulnerability↗2024-02-13
▶
CVE-2024-21374 (MEDIUM CVSS 5) | Microsoft Teams for Android Informa | cvebase.io