Dynamics 365 Integration by AlexaCRM <= 1.3.12 - Subscriber+ Log Level Update and Log Download
LANACOMMONVDB ID: 322427e4-8fcf-4663-9469-647e3e1b1a38
The plugin does not have authorisation check when updating log level or downloading log via an AJAX action, which could allow any authenticated users, such as subscriber to call it and update log level and download the log.