A security researcher has disclosed a critical SOQL injection vulnerability in Salesforce's built-in controller that potentially exposed sensitive user data.
  • jordanlund@lemmy.worldEnglish
    1·
    9 days ago

    Not new. FTA:

    “Following responsible disclosure to Salesforce in late February 2024, the vulnerability was quietly resolved without public acknowledgment.”