Yuval Weber

**Name of the Vulnerable Software and Affected Versions** M365 Copilot (affected versions not specified) **Description** A missing authentication flaw in a critical function allows an unauthorized attacker to disclose information over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure Cloud Shell (affected versions not specified) **Description** A server-side request forgery (SSRF) issue exists in Azure Cloud Shell. This allows an unauthorized attacker to elevate privileges over a network. Server-side request forgery is a web security flaw that allows an attacker to cause the server to make HTTP requests to an arbitrary domain of the attacker's choosing. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.