All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-47645
HIGHpublished 2026-06-19 21:16 UTC · 2 months ago · modified 2026-06-26 21:42 UTC
8.8
CVSS / 10
// description
Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to elevate privileges over a network.
// weaknesses (CWE)
- CWE-601