SALESFORCE TAGS 5 CVES AFTER SAAS SECURITY PROBE UNCOVERS MISCONFIG RISKS

Summary from the TLDR InfoSec newsletter

Salesforce assigned 5 CVEs after a security report revealed 20+ configuration weaknesses in Flexcards, Data Mappers, and core components. These vulnerabilities could expose customers to unauthorized access and session hijacking. 16 other flaws were classified as customer misconfigurations. Admins have been urged to review and secure configurations to prevent exploitation.