CVE-2021-3339: Microsoft Modernflow

Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days.

ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen.

Affected products

• Microsoft Modernflow: before 1.3.00.208 (fixed in 1.3.00.208)

Published 2021-02-19. Last modified 2026-06-17.