Salesforce CPQ Security Breach

Salesforce CPQ is a cloud-based software from US-based Salesforce, Inc. that helps sales reps quickly and accurately configure, price, and quote products. A security vulnerability exists in Salesforce CPQ versions prior to 7.0 that stems from the application allowing an attacker to read API keys...

CVE-2024-38453

CVE-2024-38453 affects the Avalara for Salesforce CPQ app for Salesforce, prior to version 7.0. The vulnerability allows attackers to read an API key. The public notes indicate the current version is 11 as of mid-2024. The connected documents do not provide detailed root cause analysis, specific ...