Microsoft SharePoint Connector Flaw Could Have Enabled Credential Theft Across Power Platform

The vulnerability, at its core, is an instance of server-side request forgery (SSRF) stemming from the use of the "custom value" functionality within the SharePoint connector that permits an attacker to insert their own URLs as part of a flow.