Power Pages: Another “Leak”


Power Pages, a low-code/no-code development tool by Microsoft, has been in the news for data exposure issues. In 2021, a data leak occurred due to misconfigurations in the List functionality of Power Pages. Microsoft made changes to improve security and messaging around the issue. Now, in 2024, another data leak has been discovered, this time related to the Power Pages Web API. The leak requires multiple configurations and permissions to be set, making it less likely to happen accidentally. These leaks highlight the importance of having knowledgeable individuals involved in the development process, whether using low-code/no-code platforms or traditional coding. Amateurs can cause harm regardless of the technology being used.


Article 3m

Login now to access my digest by 365.Training

Learn how my digest works
Features
  • Articles, blogs, podcasts, training, and videos
  • Quick read TL;DRs for each item
  • Advanced filtering to prioritize what you care about
  • Quick views to isolate what you are looking for right now
  • Save your favorite items
  • Share your favorites
  • Snooze items you want to revisit when you have more time