News for hackers. Stuff that matters.

A comment on Zero-click, wormable, cross-platform remote code execution in Microsoft Teams. Parent comment

Re:Zero-click, wormable, cross-platform remote code executio... by oskarsv on Monday December 07, 2020 @12:20PM (#25334274)
There is no timeline besides when I reported it and now minus 2wks. They never told me when the fix was deployed.

There is little value in going through the email chains to note each date:(. Final decision was made 2020-11-19

[ Parent | on HN ]
Re:Zero-click, wormable, cross-platform remote code executio... by politelemon on Monday December 07, 2020 @12:54PM (#25334779)
Could you put that in the README, is what we're asking, as vague as it may be.

At the moment the 'has been fixed' is the only clue to this in terms of resolution, and it's tucked away; without it it looks like most of the README is attempting to capitalize on the shock/outrage factor.

Edit: Thanks, author has added some dates.

https://github.com/oskarsve/ms-teams-rce/commit/35eac619fdef...

[ Parent | on HN ]