CVE-2024-21448

CWE-20 — Improper Input Validation4 documents4 sources
Severity
5.0MEDIUM
EPSS
0.3%
top 45.37%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft Microsoft Teams FOR AndroidMicrosoft Teams
Timeline
PublishedMar 12

Description

Microsoft Teams for Android Information Disclosure Vulnerability

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:NExploitability: 1.3 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5microsoft/microsoft_teams_for_android1.0.0 — 1.0.0.2024022302
▶NVDmicrosoft/teams< 1.0.0.2024022302

🔴Vulnerability Details

2
CVEList
Microsoft Teams for Android Information Disclosure Vulnerability↗2024-03-12
▶
GHSA
GHSA-g269-8v49-ggqw: Microsoft Teams for Android Information Disclosure Vulnerability↗2024-03-12
▶

📋Vendor Advisories

1
Microsoft
Microsoft Teams for Android Information Disclosure Vulnerability↗2024-03-12
▶
CVE-2024-21448 (MEDIUM CVSS 5) | Microsoft Teams for Android Informa | cvebase.io