CVE-2023-28417

Summary

CVE-2023-28417 represents a Missing Authorization vulnerability in the AlexaCRM Dynamics 365 Integration. This issue arises due to incorrectly configured access control security levels, enabling attackers to exploit the weakness. The vulnerability impacts Dynamics 365 Integration versions from n/a through 1.3.12. This security flaw could potentially allow unauthorized access or modifications to sensitive data, posing a significant risk to organizations utilizing the affected software.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.