{"id":"CVE-2025-67750","sourceIdentifier":"security-advisories@github.com","published":"2025-12-12T21:15:59.857","lastModified":"2026-10-14T13:10:00.187","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lightning Flow Scanner provides a A CLI plugin, VS Code Extension and GitHub Action for analysis and optimization of Salesforce Flows. Versions 6.10.5 and below allow a maliciously crafted flow metadata file to cause arbitrary JavaScript execution during scanning. The APIVersion rule uses new Function() to evaluate expression strings, enabling an attacker to supply a malicious expression within rule configuration or crafted flow metadata. This could compromise developer machines, CI runners, or editor environments. This issue is fixed in version 6.10.6."},{"lang":"es","value":"Lightning Flow Scanner proporciona un plugin de CLI, una extensión de VS Code y una Acción de GitHub para el análisis y la optimización de los Salesforce Flows. Las versiones 6.10.5 e inferiores permiten que un archivo de metadatos de flujo creado maliciosamente cause la ejecución arbitraria de JavaScript durante el escaneo. La regla APIVersion utiliza new Function() para evaluar cadenas de expresión, lo que permite a un atacante proporcionar una expresión maliciosa dentro de la configuración de la regla o en metadatos de flujo creados. Esto podría comprometer máquinas de desarrolladores, ejecutores de CI o entornos de editor. Este problema está solucionado en la versión 6.10.6."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"Flow-Scanner","product":"lightning-flow-scanner","versions":[{"version":"< 6.10.6","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.4,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-12T20:50:51.293007Z","id":"CVE-2025-67750","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"references":[{"url":"https://github.com/Flow-Scanner/lightning-flow-scanner/commit/10f64a5eb193d8a777e453b25e910144e4540795","source":"security-advisories@github.com"},{"url":"https://github.com/Flow-Scanner/lightning-flow-scanner/releases/tag/core-v6.10.6","source":"security-advisories@github.com"},{"url":"https://github.com/Flow-Scanner/lightning-flow-scanner/security/advisories/GHSA-55jh-84jv-8mx8","source":"security-advisories@github.com"}]}