Web-to-Lead (Product): news timeline & CVEs

Salesforce Indirect Prompt Injection Vulnerability Enables 0-click Data Exfiltration

Zenity disclosed SalesBleed, a patched Agentforce flaw enabling zero-click CRM theft via prompt injection.

Zenity Labs disclosed SalesBleed, a now-patched Salesforce Agentforce issue that could let attackers steal CRM data without logging in or any victim click. Hidden instructions in public Web-to-Lead submissions could later direct the agent, during a routine employee query, to read Account data such as company names and deal sizes. Exfiltration used an HTML image hostname that leaked values through DNS after malformed URLs bypassed Trusted URL redaction. Salesforce switched to standards-compliant URL parsing, and Zenity said it confirmed the fix in August.

Cyber Security Newsupdated Sep 25, 13:30 UTC · 1d agofirst Sep 25, 08:34 UTC · 2d agoAI safety & security 6 sources

Salesforce Agentforce Flaw Enables 0-Click Data Exfiltration via Prompt Injection

Zenity's SalesBleed shows a zero-click Agentforce prompt injection that can leak Salesforce CRM data via DNS.

Zenity Labs disclosed SalesBleed, an indirect prompt-injection chain against Salesforce Agentforce that needs no Salesforce login or victim click. An attacker plants instructions in a public Web-to-Lead submission; when an employee later asks the agent to review leads, those instructions can drive the CRM subagent to query records such as account names and deal sizes. The proof of concept encodes the data in an attacker-controlled hostname inside an image URL so a DNS lookup exposes it, including through Slack link previews in some deployments. Salesforce said it strengthened the affected controls, changed some Slack defaults to require confirmation, and reported no evidence of exploitation in the wild.

GBHackersupdated Sep 25, 13:30 UTC · 1d agofirst Sep 25, 07:47 UTC · 2d agoAI safety & security 6 sources

Web-to-Lead

Timeline2 articles

Appears with

Salesforce Indirect Prompt Injection Vulnerability Enables 0-click Data Exfiltration

Salesforce Agentforce Flaw Enables 0-Click Data Exfiltration via Prompt Injection