Description (CNA)
MCP Salesforce Connector is a Model Context Protocol (MCP) server implementation for Salesforce integration. Prior to 0.1.10, arbitrary attribute access leads to disclosure of Salesforce auth token. This vulnerability is fixed in 0.1.10.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| smn2gnt / MCP-Salesforce | affected < 0.1.10 |
CWE
CWE-200
References
- https://github.com/smn2gnt/MCP-Salesforce/security/advisories/GHSA-vf6j-c56p-cq58
- https://github.com/smn2gnt/MCP-Salesforce/commit/a1e3a5a786f48508d066b6d40b58201ebf9b7fd6
- https://github.com/smn2gnt/MCP-Salesforce/releases/tag/v0.1.10
ADP enrichment
No English description supplied.
No references supplied.