writeups.xyz / Exploits Explained: Permission misconfiguration within Salesforce JavaScript Remoting tokens used for Apex Controllers

Submitter : c2a

Date: 21 April 2023

Bounty : undisclosed

Vulnerabilities :

• Salesforce
• Security Misconfiguration
• Broken Access Control

Programs :

• Undisclosed

Authors :

• Mahmoud Gamal (@Zombiehelp54)

Link :
https://www.synack.com/blog/permission-problem-salesforce-javascript-remoting-token/