{"vulnerability": "cve-2021-24114", "sightings": [{"uuid": "16d83e79-e034-4b71-b0c4-c79915180a4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24114", "type": "seen", "source": "https://t.me/cibsecurity/24178", "content": "\u203c CVE-2021-24114 \u203c\n\nMicrosoft Teams iOS Information Disclosure Vulnerability\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-26T02:44:18.000000Z"}, {"uuid": "c2c8da54-c18c-4c2f-a84f-e518d57ff442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24114", "type": "seen", "source": "https://t.me/hacking_Attack/61552", "content": "Black Hat Ethical Hacking\nMicrosoft Teams security vulnerability left users open to XSS via flawed stickers feature\n\nMicrosoft Teams security vulnerability left users open to XSS via flawed stickers featurePost Views: 10 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA security researcher has found that attackers could abuse the popular sticker feature in Microsoft Teams to conduct cross-site scripting\u00a0(XSS) attacks.\n\nMicrosoft Teams, alongside comparable teleconferencing services including Zoom, have experienced a surge in popularity over the past few years.\n\nThe Covid-19\u00a0pandemic forced organizations to adopt work-from-home models whenever possible. In the aftermath, employees have often been given the option of either staying remote or going hybrid.\n\nWith so many users, any vulnerability\u00a0in Microsoft Teams could have widespread impact. As such, cybersecurity researchers, including Gais Cyber Security\u2019s senior cybersecurity specialist Numan Turle, have examined the software for potential flaws. Sticky subjectIn 2021, Turle uncovered CVE-2021-24114. Issued a CVSS score of 5.7, the bug was discovered in the preview process of images sent via Teams to leak Skype tokens\u00a0(PDF) and trigger an account takeover vulnerability in Teams iOS.\n\nA year on, the researcher decided to examine Microsoft Teams\u2019 sticker function\u00a0for new security issues. \u200bSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course\nWhen a sticker is sent via Teams, the platform converts it into an image and uploads the content as \u2018RichText/HTML\u2019 in the subsequent message.\n\nTurle inspected the HTML request using Burp Suite and tried out typical attributes \u2013 to no avail, due to the protections offered by Microsoft\u2019s Content Security Policy\u00a0(CSP).\n\nCSP is designed to mitigate a range of common web attacks, including XSS.\n\nHowever, after plugging the CSP into Google\u2019s CSP Evaluator tool, the researcher found a CSP defect \u2013 the script-src\u00a0field was flagged as unsafe, which paved the way for potential HTML injection attacks against multiple domains. Trying a different angleMicrosoft\u00a0had plugged these security holes via Azure domain changes. So, after digging deeper and inspecting Teams in-browser, Turle uncovered a JavaScript element, angular-jquery, that could be used as an alternative.\n\njQuery with Angular is a JavaScript\u00a0framework for managing HTML and CSS interactions. However, this version was out of date and vulnerabilities in the outdated version (1.5.14) \u2013 could be utilized to bypass the CSP.\nTrending: How do QR Codes work and how criminal hackers use them to generate phishing attacks \u2013 Demo\nTrending: OSINT Tool: Pagodo\nAfter crafting a malicious iframe with help from HTML encoding, the researcher was able to create a malicious payload, sent via the stickers function in Teams, to trigger XSS, obtained through user interaction.\n\nTurle disclosed the XSS issue to Microsoft on January 6. The vulnerability was patched in March and the researcher was awarded a $6,000 bug bounty. The Daily Swighas reached out to Gais Cyber Security and Microsoft and we will update when we hear back.\n\nFull details can be found in a technical blog post\u00a0from Turle. \u200bTrending: New RedAlert Ransomware targets Windows, Linux VMware ESXi servers\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a q[...]", "creation_timestamp": "2026-09-01T20:01:34.748898Z"}, {"uuid": "dbf03e1b-8ed4-49dd-a55c-c71b8c1ed272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24114", "type": "seen", "source": "https://t.me/hacking_Attack/61552", "content": "Black Hat Ethical Hacking\nMicrosoft Teams security vulnerability left users open to XSS via flawed stickers feature\n\nMicrosoft Teams security vulnerability left users open to XSS via flawed stickers featurePost Views: 10 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA security researcher has found that attackers could abuse the popular sticker feature in Microsoft Teams to conduct cross-site scripting\u00a0(XSS) attacks.\n\nMicrosoft Teams, alongside comparable teleconferencing services including Zoom, have experienced a surge in popularity over the past few years.\n\nThe Covid-19\u00a0pandemic forced organizations to adopt work-from-home models whenever possible. In the aftermath, employees have often been given the option of either staying remote or going hybrid.\n\nWith so many users, any vulnerability\u00a0in Microsoft Teams could have widespread impact. As such, cybersecurity researchers, including Gais Cyber Security\u2019s senior cybersecurity specialist Numan Turle, have examined the software for potential flaws. Sticky subjectIn 2021, Turle uncovered CVE-2021-24114. Issued a CVSS score of 5.7, the bug was discovered in the preview process of images sent via Teams to leak Skype tokens\u00a0(PDF) and trigger an account takeover vulnerability in Teams iOS.\n\nA year on, the researcher decided to examine Microsoft Teams\u2019 sticker function\u00a0for new security issues. \u200bSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course\nWhen a sticker is sent via Teams, the platform converts it into an image and uploads the content as \u2018RichText/HTML\u2019 in the subsequent message.\n\nTurle inspected the HTML request using Burp Suite and tried out typical attributes \u2013 to no avail, due to the protections offered by Microsoft\u2019s Content Security Policy\u00a0(CSP).\n\nCSP is designed to mitigate a range of common web attacks, including XSS.\n\nHowever, after plugging the CSP into Google\u2019s CSP Evaluator tool, the researcher found a CSP defect \u2013 the script-src\u00a0field was flagged as unsafe, which paved the way for potential HTML injection attacks against multiple domains. Trying a different angleMicrosoft\u00a0had plugged these security holes via Azure domain changes. So, after digging deeper and inspecting Teams in-browser, Turle uncovered a JavaScript element, angular-jquery, that could be used as an alternative.\n\njQuery with Angular is a JavaScript\u00a0framework for managing HTML and CSS interactions. However, this version was out of date and vulnerabilities in the outdated version (1.5.14) \u2013 could be utilized to bypass the CSP.\nTrending: How do QR Codes work and how criminal hackers use them to generate phishing attacks \u2013 Demo\nTrending: OSINT Tool: Pagodo\nAfter crafting a malicious iframe with help from HTML encoding, the researcher was able to create a malicious payload, sent via the stickers function in Teams, to trigger XSS, obtained through user interaction.\n\nTurle disclosed the XSS issue to Microsoft on January 6. The vulnerability was patched in March and the researcher was awarded a $6,000 bug bounty. The Daily Swighas reached out to Gais Cyber Security and Microsoft and we will update when we hear back.\n\nFull details can be found in a technical blog post\u00a0from Turle. \u200bTrending: New RedAlert Ransomware targets Windows, Linux VMware ESXi servers\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a q[...]", "creation_timestamp": "2026-09-02T01:01:44.475774Z"}]}