CNNVD-202511-145 Information

CNNVD ID

CNNVD-202511-145

CVE-2025-64320

  • CNNVD Published: 2025-11-04

Description (Chinese)

Salesforce Agentforce Vibes Extension是美国Salesforce公司的一个AI编码代理扩展。 Salesforce Agentforce Vibes Extension 3.2.0之前版本存在安全漏洞,该漏洞源于对LLM提示输入中和不当,可能导致代码注入。

Description (English)

Salesforce Agentforce Vibes Extension is an AI-coded agent for Salesforce in the United States. There was a security loophole in the previous version of Salesforce Agentforce Vibes Extension 3.2.0, which originated from inappropriate input into LLM tips, which could lead to code injection.

Hazard Level

Low

Vulnerability Type

其他

Affected Vendor

Salesforce

Published

2025-11-04

Last Modified

2026-02-24

References

https://help.salesforce.com/s/articleView?id=005228032&type=1

Patch

https://help.salesforce.com/s/articleView?id=005228032&type=1

Share on: