security_identifier

SalesBleed

Name given by Zenity Labs to a set of three vulnerabilities in Salesforce Agentforce involving data exfiltration and phishing.

Current clusters

build1 publisher

SalesBleed made Agentforce leak CRM Account data over DNS from a public lead form

Zenity Labs demonstrated SalesBleed, a proof-of-concept that used a public Salesforce lead form to make Agentforce read Account records and leak them over DNS. Salesforce has already patched it.

Publishers:dev.to

Reality

Evidence45
Adoption: Insufficient
Hype gap+10
Incentives: Insufficient
Confidence55

security2 publishers

Poisoned Web-to-Lead submissions made Salesforce Agentforce leak CRM data past Trusted URLs

Zenity Labs found three Salesforce Agentforce bugs that let a planted sales lead drive zero-click CRM data theft and Slack phishing. Each attack began with one poisoned lead-form submission, and Salesforce fixed all three within 79 days of Zenity's report.

Publishers:infosecurity-magazine.comsecurityweek.com

Reality

Evidence58
Adoption: Insufficient
Hype gap+15
Incentives40
Confidence62