5.7
Moyenne
CVE-2025-29817 Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network
Description
Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Power Automate for Desktop 1.0 | 1.0.0.0 → < 2.51.349.24355 | 2.51.349.24355 |
Références
- Microsoft Power Automate Desktop Information Disclosure Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Power Automate for Desktop
Les 6 CVE de Power Automate for Desktop →
CVE-2026-77897
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally
7.0
Élevée
CVE-2026-40374
Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose…
6.5
Moyenne
CVE-2025-47966
Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to…
9.8
Critique
CVE-2025-21187
Microsoft Power Automate Remote Code Execution Vulnerability
7.8
Élevée