Skip to content

CVE-2016-15007 Centralized-Salesforce-Dev-Framework SOQL SObjectService.cls SObjectService injection

CriticalCVSS 9.8 EPSS 0.89%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

A vulnerability was found in Centralized-Salesforce-Dev-Framework. It has been declared as problematic. Affected by this vulnerability is the function SObjectService of the file src/classes/SObjectService.cls of the component SOQL Handler. The manipulation of the argument orderDirection leads to injection. The patch is named db03ac5b8a9d830095991b529c067a030a0ccf7b. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217195.

Affected products

ProductAffected versionsFixed in
centralized salesforce development framework project centralized salesforce development framework < 2016-06-20 2016-06-20

References

  • github.com patch third-party-advisory
  • vuldb.com permissions-required signature third-party-advisory
  • vuldb.com permissions-required technical-description third-party-advisory vdb-entry