Description
An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft Power Platform | - | — |
Advisories 1
- MSRC-CVE-2024-35260 Microsoft Dataverse Remote Code Execution Vulnerability Microsoft Security Response Center · Jun 27, 2024
References
- Microsoft Dataverse Remote Code Execution Vulnerability vendor-advisory patch