HackerOne: Second-order SOQL injection through email and campaign name parameter in Salesforce lead submission

Second-order SOQL injection through email and campaign name parameter in Salesforce lead submission. Directory profiles can be claimed by affiliated organizations. Lead creation, duplicate detection, and vulnerability demonstration in HackerOne's SFDC backend with campaign name. Vulnerability results in a second-order SOQL injection due to direct input into SOQL query. Impact is limited but caution for string interpolation in queries.