Microsoft Power Apps Informationsfreigabe-Schwachstelle

The SSRF vulnerability in Microsoft Power Apps presents a significant risk because it allows attackers to bypass security controls and access resources they shouldn't. An attacker could craft malicious Power Apps workflows that send requests to internal services, databases, or even external websites, potentially exposing sensitive data like API keys, credentials, or internal network configurations. This could lead to data breaches, unauthorized access to systems, and potential lateral movement within the network. The impact is amplified if Power Apps is integrated with other critical business applications, as the vulnerability could be exploited to compromise those systems as well.

Organizations heavily reliant on Microsoft Power Apps for business processes, particularly those integrating with internal systems or APIs, are at significant risk. Environments with weak network segmentation or inadequate input validation are especially vulnerable. Any deployment of Power Apps prior to the fixed version is potentially exposed.

• windows / dotnet: Monitor Power Apps logs for outbound requests to unexpected internal or external IP addresses or domains. Use PowerShell to check for unusual network connections initiated by Power Apps processes.

Get-Process -Name "PowerAppsService" | ForEach-Object { Get-NetTCPConnection -OwningProcess $_.Id }

• generic web: Monitor web server access logs for requests originating from Power Apps that target internal resources. Examine response headers for signs of SSRF exploitation (e.g., unusual server names or IP addresses). • database (mysql, redis, mongodb, postgresql): While less direct, monitor database logs for unusual connection attempts or queries originating from Power Apps, which could indicate an attacker attempting to leverage SSRF to access database information.

1. 2025-05-08Disclosure

   disclosure

1. Reserviert2025-05-08
2. Veröffentlicht2025-05-08
3. Geändert2026-02-13
4. EPSS aktualisiert2026-03-23

The primary mitigation for CVE-2025-47733 is to upgrade to a patched version of Microsoft Power Apps as soon as it becomes available. Until the patch is applied, consider implementing temporary workarounds to restrict outbound network access from Power Apps workflows. This could involve configuring network firewalls to block connections to specific internal or external resources. Additionally, review and audit existing Power Apps workflows to identify any potentially vulnerable configurations. While a full fix requires patching, these measures can significantly reduce the attack surface.