A security vulnerability has been discovered with the x360Sync Web Preview services. This vulnerability allows hidden code to be executed in certain scenarios when previewing a specific set of file types.
While we investigate this vulnerability, we have globally disabled x360Sync's Web Preview tool for our SaaS partners.
Recommended Actions for Private Cloud Partners
Private Cloud partners should disable the Web Preview organization policy at the Master level (All Organizations).
For instructions, please reference the Configuring the Web Preview Tool Knowledgebase article.
x360Sync's Web Preview tool has been disabled while we investigate this issue. Documents, presentations, and spreadsheets can safely be previewed in the Collaborative Web Editor. However, images and PDFs will no longer be previewed in the Web Preview tool and will instead launch in the native browser tools.
We will update our Web Preview services and return them to fully operational as soon as this vulnerability is addressed.
We apologize for any inconvenience this may cause.