8.2
High
CVE-2024-38166 An unauthenticated attacker can exploit improper neutralization of input during web page generation in Microsoft…
Description
An unauthenticated attacker can exploit improper neutralization of input during web page generation in Microsoft Dynamics 365 to spoof over a network by tricking a user to click on a link.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dynamics CRM Service Portal Web Resource | Versions not published |
References
- Microsoft Dynamics 365 Cross-site Scripting Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified