CVE-2025-67750

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-67750", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2025-12-11T20:30:54.927Z", "datePublished": "2025-12-12T20:14:21.004Z", "dateUpdated": "2025-12-12T20:50:57.161Z"}, "containers": {"cna": {"title": "Lightning Flow Scanner is Vulnerable to Code Injection via Unsafe Use of new Function() in APIVersion Rule", "problemTypes": [{"descriptions": [{"cweId": "CWE-94", "lang": "en", "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/Flow-Scanner/lightning-flow-scanner/security/advisories/GHSA-55jh-84jv-8mx8", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/Flow-Scanner/lightning-flow-scanner/security/advisories/GHSA-55jh-84jv-8mx8"}, {"name": "https://github.com/Flow-Scanner/lightning-flow-scanner/commit/10f64a5eb193d8a777e453b25e910144e4540795", "tags": ["x_refsource_MISC"], "url": "https://github.com/Flow-Scanner/lightning-flow-scanner/commit/10f64a5eb193d8a777e453b25e910144e4540795"}, {"name": "https://github.com/Flow-Scanner/lightning-flow-scanner/releases/tag/core-v6.10.6", "tags": ["x_refsource_MISC"], "url": "https://github.com/Flow-Scanner/lightning-flow-scanner/releases/tag/core-v6.10.6"}], "affected": [{"vendor": "Flow-Scanner", "product": "lightning-flow-scanner", "versions": [{"version": "< 6.10.6", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2025-12-12T20:14:21.004Z"}, "descriptions": [{"lang": "en", "value": "Lightning Flow Scanner provides a A CLI plugin, VS Code Extension and GitHub Action for analysis and optimization of Salesforce Flows. Versions 6.10.5 and below allow a maliciously crafted flow metadata file to cause arbitrary JavaScript execution during scanning. The APIVersion rule uses new Function() to evaluate expression strings, enabling an attacker to supply a malicious expression within rule configuration or crafted flow metadata. This could compromise developer machines, CI runners, or editor environments. This issue is fixed in version 6.10.6."}], "source": {"advisory": "GHSA-55jh-84jv-8mx8", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-12-12T20:50:51.293007Z", "id": "CVE-2025-67750", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-12T20:50:57.161Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-67750", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-12-12T20:50:51.293007Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-12T20:50:54.043Z"}}], "cna": {"title": "Lightning Flow Scanner is Vulnerable to Code Injection via Unsafe Use of new Function() in APIVersion Rule", "source": {"advisory": "GHSA-55jh-84jv-8mx8", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Flow-Scanner", "product": "lightning-flow-scanner", "versions": [{"status": "affected", "version": "< 6.10.6"}]}], "references": [{"url": "https://github.com/Flow-Scanner/lightning-flow-scanner/security/advisories/GHSA-55jh-84jv-8mx8", "name": "https://github.com/Flow-Scanner/lightning-flow-scanner/security/advisories/GHSA-55jh-84jv-8mx8", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/Flow-Scanner/lightning-flow-scanner/commit/10f64a5eb193d8a777e453b25e910144e4540795", "name": "https://github.com/Flow-Scanner/lightning-flow-scanner/commit/10f64a5eb193d8a777e453b25e910144e4540795", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/Flow-Scanner/lightning-flow-scanner/releases/tag/core-v6.10.6", "name": "https://github.com/Flow-Scanner/lightning-flow-scanner/releases/tag/core-v6.10.6", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Lightning Flow Scanner provides a A CLI plugin, VS Code Extension and GitHub Action for analysis and optimization of Salesforce Flows. Versions 6.10.5 and below allow a maliciously crafted flow metadata file to cause arbitrary JavaScript execution during scanning. The APIVersion rule uses new Function() to evaluate expression strings, enabling an attacker to supply a malicious expression within rule configuration or crafted flow metadata. This could compromise developer machines, CI runners, or editor environments. This issue is fixed in version 6.10.6."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2025-12-12T20:14:21.004Z"}}}, "cveMetadata": {"cveId": "CVE-2025-67750", "state": "PUBLISHED", "dateUpdated": "2025-12-12T20:50:57.161Z", "dateReserved": "2025-12-11T20:30:54.927Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2025-12-12T20:14:21.004Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "lightning-flow-scanner", "vendor": "Flow-Scanner", "versions": [{"status": "affected", "version": "< 6.10.6"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Lightning Flow Scanner provides a A CLI plugin, VS Code Extension and GitHub Action for analysis and optimization of Salesforce Flows. Versions 6.10.5 and below allow a maliciously crafted flow metadata file to cause arbitrary JavaScript execution during scanning. The APIVersion rule uses new Function() to evaluate expression strings, enabling an attacker to supply a malicious expression within rule configuration or crafted flow metadata. This could compromise developer machines, CI runners, or editor environments. This issue is fixed in version 6.10.6."}, {"lang": "es", "value": "Lightning Flow Scanner proporciona un plugin de CLI, una extensi\u00f3n de VS Code y una Acci\u00f3n de GitHub para el an\u00e1lisis y la optimizaci\u00f3n de los Salesforce Flows. Las versiones 6.10.5 e inferiores permiten que un archivo de metadatos de flujo creado maliciosamente cause la ejecuci\u00f3n arbitraria de JavaScript durante el escaneo. La regla APIVersion utiliza new Function() para evaluar cadenas de expresi\u00f3n, lo que permite a un atacante proporcionar una expresi\u00f3n maliciosa dentro de la configuraci\u00f3n de la regla o en metadatos de flujo creados. Esto podr\u00eda comprometer m\u00e1quinas de desarrolladores, ejecutores de CI o entornos de editor. Este problema est\u00e1 solucionado en la versi\u00f3n 6.10.6."}], "id": "CVE-2025-67750", "lastModified": "2026-10-14T13:10:00.187", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 5.9, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-67750", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-12-12T20:50:51.293007Z", "version": "2.0.3"}}]}, "published": "2025-12-12T21:15:59.857", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/Flow-Scanner/lightning-flow-scanner/commit/10f64a5eb193d8a777e453b25e910144e4540795"}, {"source": "security-advisories@github.com", "url": "https://github.com/Flow-Scanner/lightning-flow-scanner/releases/tag/core-v6.10.6"}, {"source": "security-advisories@github.com", "url": "https://github.com/Flow-Scanner/lightning-flow-scanner/security/advisories/GHSA-55jh-84jv-8mx8"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"created": "2025-12-14T21:16:08.152764+00:00", "updated": "2025-12-14T21:16:08.152789+00:00", "vendors": ["flow-scanner", "flow-scanner$PRODUCT$lightning-flow-scanner"]}