Power Pages, a low-code/no-code development tool by Microsoft, has been in the news for data exposure issues. In 2021, a data leak occurred due to misconfigurations in the List functionality of Power Pages. Microsoft made changes to improve security and messaging around the issue. Now, in 2024, another data leak has been discovered, this time related to the Power Pages Web API. The leak requires multiple configurations and permissions to be set, making it less likely to happen accidentally. These leaks highlight the importance of having knowledgeable individuals involved in the development process, whether using low-code/no-code platforms or traditional coding. Amateurs can cause harm regardless of the technology being used.
Login now to access my digest by 365.Training