A vulnerability classified as critical was found in Microsoft Azure Health Bot Service. This vulnerability affects unknown code of the component Javascript Template Handler. The manipulation leads to code injection.
The attack can be initiated remotely. Furthermore, there is an exploit available.
This product is available as a managed service. Users are not able to maintain vulnerability countermeasures themselves.