Researchers Disclose Unpatched Vulnerabilities in Microsoft Groups Software program

Microsoft mentioned it will not be fixing or is pushing patches to a later date for 3 of the 4 safety flaws uncovered in its Groups enterprise communication platform earlier this March.

The disclosure comes from Berlin-based cybersecurity agency Optimistic Safety, which discovered that the implementation of the hyperlink preview function was inclined to various points that might “permit accessing inner Microsoft companies, spoofing the hyperlink preview, and, for Android customers, leaking their IP tackle, and DoS’ing their Groups app/channels.”

Of the 4 vulnerabilities, Microsoft is alleged to have addressed just one that ends in IP tackle leakage from Android units, with the tech large noting {that a} repair for the denial-of-service (DoS) flaw shall be thought of in a future model of the product. The problems have been responsibly disclosed to the corporate on March 10, 2021.

Chief among the many flaws is a server-side request forgery (SSRF) vulnerability within the endpoint “/urlp/v1/url/information” that might be exploited to glean info from Microsoft’s native community. Additionally found is a spoofing bug whereby the preview hyperlink goal could be altered to level to any malicious URL whereas protecting the primary hyperlink, preview picture and outline intact, permitting attackers to cover malicious hyperlinks and stage improved phishing assaults.

The DoS vulnerability, which impacts the Android model of Groups, might trigger the app to crash just by sending a message with a specifically crafted hyperlink preview containing an invalid goal as an alternative of a professional URL. The final of the problems considerations an IP tackle leak, which additionally impacts the Android app. By intercepting messages that embody a hyperlink preview to level the thumbnail URL to a non-Microsoft area, Optimistic Safety mentioned it is doable to achieve entry to a consumer’s IP tackle and consumer agent knowledge.

“Whereas the found vulnerabilities have a restricted affect, it is shocking each that such easy assault vectors have seemingly not been examined for earlier than, and that Microsoft doesn’t have the willingness or sources to guard their customers from them,” Optimistic Safety’s co-founder Fabian Bräunlein mentioned.