writeups.xyz / "Important, Spoofing" - zero-click, wormable, cross-platform remote code execution in Microsoft Teams

Submitter : c2a

Date: 7 December 2020

Bounty : undisclosed

Vulnerabilities :

• RCE
• Stored XSS
• CSP Bypass
• CSTI

Programs :

• Microsoft

Authors :

• Oskars Vegeris

Link :
https://github.com/oskarsve/ms-teams-rce