Power Apps OData Feeds Detected

info Web Application Scanning Plugin ID 112949
New! Plugin Severity Now Using CVSS v3

The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Synopsis

Power Apps OData Feeds Detected

Description

Microsoft Power Apps is a low-code development platform designed to help users build rich web and mobile applications. Power Apps enables users to publish table data as OData feeds, providing a RESTful web service by default available to any user.

The scanner detected the presence of public data in the OData feed of the target Power Apps application.

See Also

https://docs.microsoft.com/en-us/powerapps/powerapps-overview

https://www.upguard.com/breaches/power-apps

https://crmtipoftheday.com/1407/how-to-secure-power-apps-portal-from-making-the-news/

Plugin Details

Severity: Info

ID: 112949

Type: remote

Published: 9/8/2021

Updated: 9/8/2021

Scan Template: scan, pci