Power Platform Security Vulnerabilities

CVE-2023-36019

Microsoft Power Platform Connector Spoofing Vulnerability

CVE-2024-35260

An authenticated attacker can exploit an Untrusted Search Path vulnerability in Microsoft Dataverse to execute code over a network.

CVE-2024-47083

Power Platform Terraform Provider allows managing environments and other resources within Power Platform. Versions prior to 3.0.0 have an issue in the Power Platform Terraform Provider where sensitive information, specifically the client_secret used in the service principal authentication, may be e...