8.2
Élevée
CVE-2024-38166 An unauthenticated attacker can exploit improper neutralization of input during web page generation in Microsoft…
Description
An unauthenticated attacker can exploit improper neutralization of input during web page generation in Microsoft Dynamics 365 to spoof over a network by tricking a user to click on a link.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Dynamics CRM Service Portal Web Resource | Versions non publiées |