Metadata Leakage in Teams Profile (Frequent Spaces)

XMLWordPrintable

    • Severity 3 - Minor

      Issue Summary

      The "Frequent Spaces" section in the Teams app profile surfaces Confluence space names off-network, bypassing the Confluence IP allowlist.

      Steps to Reproduce

      1. Configure an active IP allowlist for Confluence.
      1. Access the Teams app from a non-allowlisted network.
      1. Open your own user profile.

      Expected Results

      Frequent Spaces should be filtered or empty (consistent with the Home "Recent" section).

      Actual Results

       Real Confluence space names are displayed in the Frequent Spaces list.

      Workaround

      Currently there is no known workaround for this behavior. A workaround will be added here when available

              Assignee:
              Calvin Li
              Reporter:
              Cole Norman
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: