U.S. Dept Of Defense: Sensitive data exposure: █████████ candidate resumes/CVs available to download with no authentication through BAC/IDOR/Improper Salesforce config
The sensitive data exposure vulnerability allowed an attacker to download thousands of candidate resumes and other confidential files without authentication through a Salesforce community site...