Microsoft Bookings Vulnerability Let Attackers Alter the Meeting Details

A significant vulnerability in Microsoft Bookings allowed attackers to manipulate meeting details by exploiting insufficient input validation.  The flaw, which Microsoft has largely remedied, enabled malicious actors to inject arbitrary HTML into meeting invitations, alter calendar entries, and potentially facilitate sophisticated phishing attacks. The vulnerability stemmed from inadequate sanitization of user-supplied input in the Microsoft […]

The post Microsoft Bookings Vulnerability Let Attackers Alter the Meeting Details appeared first on Cyber Security News.