Microsoft SharePoint Connector Flaw Could’ve Enabled Credential Theft Across Power Platform
In a hypothetical attack scenario, a threat actor could create a flow for a SharePoint action and share it with a low-privileged user (read victim), resulting in a leak of their SharePoint JWT access token.
Continue reading →