Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVE-2024-21389

Summary

Microsoft Dynamics 365 (on-premises) is affected by a Cross-site Scripting vulnerability that can allow an attacker to inject malicious scripts into web pages viewed by users, leading to potential data theft or unauthorized actions. This vulnerability can be exploited if an attacker manages to convince a user to click on a specially crafted link. Timely application of security updates is crucial to mitigate the risks associated with this vulnerability.

References