PT-2023-10326 · Unknown · Centralized-Salesforce-Dev-Framework
CVE-2016-15007
·
Publicado
2023-01-02
·
Atualizado
2024-05-17
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Centralized-Salesforce-Dev-Framework (affected versions not specified)
Description
A vulnerability was found in the Centralized-Salesforce-Dev-Framework, affecting the function
SObjectService of the file src/classes/SObjectService.cls of the component SOQL Handler. The manipulation of the argument orderDirection leads to injection.Recommendations
To fix this issue, it is recommended to apply a patch named
db03ac5b8a9d830095991b529c067a030a0ccf7b. As a temporary workaround, consider restricting the manipulation of the orderDirection argument in the SObjectService function until the patch is applied.Correção
Special Elements Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centralized-Salesforce-Dev-Framework