Azure Logic Apps
CVE-2023-36019
HIGH
Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
1DescriptionNVD
Microsoft Power Platform Connector Spoofing Vulnerability
AnalysisAI
Microsoft Power Platform Connector Spoofing Vulnerability. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Technical ContextAI
This vulnerability is classified under CWE-73. Affected products include: Microsoft Azure Logic Apps, Microsoft Power Platform.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Azure Logic Apps
View allPrivilege escalation in Microsoft Azure Logic Apps allows an authenticated attacker with low-level privileges to elevate
Information disclosure in Microsoft Azure Logic Apps allows an authenticated, low-privileged attacker to read data they
Privilege elevation in Microsoft Azure Logic Apps allows an unauthenticated, remote attacker to escalate privileges by a
Privilege escalation in Azure Logic Apps results from improper path validation, enabling remote attackers to gain elevat
Same weakness CWE-73 – External Control of File Name or Path
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today