Microsoft Dynamics 365 Sales Server-Side Request Forgery Vulnerability Allowing Privilege Escalation

A Server-Side Request Forgery (SSRF) vulnerability has been identified in Microsoft Dynamics 365 Sales. This vulnerability allows an authorized attacker to manipulate requests sent from the server, potentially leading to unauthorized access or actions within the network. The issue arises from insufficient validation of server-side requests, enabling attackers to exploit the application's request handling capabilities.

Impact

Exploitation of this vulnerability could allow an authorized attacker to elevate privileges, gaining unauthorized access to resources or functionalities within the application or network.