9.6
Critical
CVE-2023-36019 Microsoft Power Platform Connector Spoofing Vulnerability
Description
Microsoft Power Platform Connector Spoofing Vulnerability
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Power Platform 1.0 | 1.0.0 → < 3.23113 | 3.23113 |
| Azure Logic Apps 3.0 | 3.0 → < 3.23113 | 3.23113 |
References
- Microsoft Power Platform Connector Spoofing Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Power Platform
The 4 CVEs of Microsoft Power Platform →
CVE-2026-65818
Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network
8.5
High
CVE-2024-38190
Missing authorization in Power Platform allows an unauthenticated attacker to view sensitive information through a…
8.6
High
CVE-2024-35260
An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over…
8.0
High