{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/dynamics-crm/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Power Apps","Dynamics CRM"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Microsoft"],"content_html":"\u003cp\u003eMicrosoft has identified a vulnerability in the Microsoft Power Apps integration for the Dynamics CRM platform. A remote, authenticated attacker can exploit this flaw to gain unauthorized access to sensitive information. As of the current advisory, no further technical details regarding the exploit path or the specific mechanism of disclosure have been disclosed.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003ePrioritize reviewing the official Microsoft security updates and apply relevant patches to the Dynamics CRM and Power Apps environments once available. Monitor administrative logs for unauthorized access or unusual data export activity from the Power Apps portal.\u003c/p\u003e\n","date_modified":"2026-11-11T15:57:18Z","date_published":"2026-11-11T15:57:18Z","id":"https://feed.craftedsignal.io/briefs/2026-11-microsoft-power-apps-info-disclosure/","summary":"A vulnerability in Microsoft Power Apps for the Dynamics CRM platform allows a remote, authenticated attacker to perform unauthorized information disclosure.","title":"Microsoft Power Apps: Information disclosure vulnerability","url":"https://feed.craftedsignal.io/briefs/2026-11-microsoft-power-apps-info-disclosure/"}],"language":"en","title":"CraftedSignal Threat Feed - Dynamics CRM","version":"https://jsonfeed.org/version/1.1"}