Acronis Vulnerability Advisory

AVA-2019-0001

Description: A cross-site scripting (XSS) vulnerability exists in the contentUrl parameter of https://teams.microsoft.com/statics/teams-modular-packages/hosted-web-content/20190320025/index.html. This can be leveraged to trigger an XSS attack against users of the Microsoft Teams desktop applications.

Vendor: Microsoft

Product: Microsoft Teams