Severity
High
Analysis Summary
CVE-2024-35260
Microsoft Dataverse could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an untrusted search path flaw. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Impact
- Code Execution
Indicators of Compromise
CVE
- CVE-2024-35260
Affected Vendors
Microsoft
Affected Products
- Microsoft Power Platform
Remediation
Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.