Hi,
We're using Dynamics 365 CE online. We have observed something strange which is also a privacy/security risk.
Our users receive e-mails with inline images in Dynamics. If they forward an e-mail and remove one or more images from the body, the mail is still sent with all the original images as attachments. The attachments are not visible in Dynamics. So users think they have removed sensitive information, but the receiver still gets all the information.
We've logged a support call with Microsoft, but I'm wondering if anyone else has noticed this. We can reproduce this behavior in 100% of the cases. Also, when I query the attachments with fetchxml I can find them, even though they are not shown in Dynamics.
Best,
Paul
Hi Nya,
Thank you for your answer. Microsoft has answered us that this is a known bug and that a fix for this will be deployed next weekend. In the mean time I will look into your suggestion.
Best regards,
Paul
Hi, Paul
I have reproduced your issue.
The deleted images do get added to forwarded emails as attachments.
They will be added into the attachments list of the email automatically. However, the list itself will not refresh in real time. So you need to refresh (or save then refresh) the email to load the list of attachments after deleting images to filter whether these attachments are needed.
As it is impossible to determine in advance which images are not needed, you can preemptively remove attachments you don't need from the list and then send this email to protect your sensitive information.
Hope this helps.
Best Regards,
Nya
Stay up to date on forum activity by subscribing. You can also customize your in-app and email Notification settings across all subscriptions.
André Arnaud de Cal... 291,240 Super User 2024 Season 2
Martin Dráb 230,149 Most Valuable Professional
nmaenpaa 101,156