Microsoft promptly removed the compromised, abandoned reply URL from the Azure AD application, effectively closing the avenue for unauthorized access. Key Findings A critical vulnerability was found in Microsoft’s Power Platform API.

Source: HackRead