Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:centralized-salesforce-dev-framework:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductCentralized Salesforce Dev Framework (82e5bde5-20b4-5c7f-86a4-6c2e78f382ac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-15007 vulnerable 2026-06-08 05:07:26.177611 Centralized-Salesforce-Dev-Framework SOQL SObjectService.cls SObjectService injection
MEDIUM (5.5)
A vulnerability was found in Centralized-Salesforce-Dev-Framework. It has been declared as problematic. Affected by this vulnerability is the function SObjectService of the file src/classes/SObjectService.cls of the component SOQL Handler. The manipulation of the argument orderDirection leads to injection. The patch is named db03ac5b8a9d830095991b529c067a030a0ccf7b. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217195.
Published: 2023-01-02T18:36:41.878Z
Updated: 2024-08-06T03:47:34.787Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.