Integrity flow vulnerability in "microsoft teams" poll 3000$ bounty Sometimes, overlooked isuue can create significant vulnerability. In the "displayname" field, we send the name of the person we want the message to be send. #bugbounty

Have you created poll with another user id ?

Yes that's right

Because I didn’t understand properly

@v3d_bug 66897 🌜, congratulations 🎉

So you created a poll on behalf of user

is it fixed?

Yes, according to the rules, you have to wait until the bug is fixed, that's why I published this vulnerability after a few months of delay.

impact?

bro you just intersept and change the name so where is impact...?

In this vulnerability, it was possible to change the name to your ID and send messages or polls in the group instead of you. So identity spoofing happens because I poll with another person's ID.