Missing Authorization Vulnerability Affects Dynamics 365 Integration

CVE-2023-28417

What is CVE-2023-28417?

A missing authorization vulnerability exists in the AlexaCRM Dynamics 365 Integration, which permits exploitation due to incorrectly configured access control security levels. This misconfiguration can lead to unauthorized access and manipulation of sensitive data across the affected versions. Users of the Dynamics 365 Integration should ensure that proper access controls are enforced to mitigate potential security risks.

References