Threats tagged 'ghsa-x7cq-fpc4-629v'

A vulnerability in Salesforce Agentforce Vibes Extension prior to version 3.2.0 allows improper neutralization of input used for large language model (LLM) prompting. This flaw enables manipulation of writable configuration files. The vulnerability has a CVSS 3.1 base score of 5.3, indicating medium severity, with low complexity and no privileges or user interaction required for exploitation.