#misconfiguration-vulnerabilities

[ follow ]
#salesforce-security #experience-cloud-exploitation #aurainspector-tool #guest-user-permissions
Information security
fromThe Hacker News
5 hours ago

Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool

Threat actors are exploiting misconfigured Salesforce Experience Cloud sites using a modified AuraInspector tool to extract sensitive data from overly permissive guest user profiles.
Information security
fromTechzine Global
1 month ago

Mandiant security tool AuraInspector prevents Salesforce problems

AuraInspector finds Aura-framework misconfigurations in Salesforce Experience Cloud that allow unauthorized access to sensitive backend data and reveals a GraphQL bypass to extract records.
[ Load more ]