{
 "type": "bundle",
 "id": "bundle--523ed955-d6a6-5d6d-a276-89fd662eadc5",
 "objects": [
  {
   "type": "incident",
   "spec_version": "2.1",
   "id": "incident--04a6f759-7caa-5fa5-acf6-5f99541ad765",
   "created": "2025-09-25T00:00:00.000Z",
   "modified": "2025-09-25T00:00:00.000Z",
   "name": "ForcedLeak: a poisoned Web-to-Lead form turns Salesforce Agentforce into a data-exfiltration channel",
   "description": "Researchers showed that instructions placed in a public Web-to-Lead form field are later read by an Agentforce agent processing the lead, which queries CRM lead records and sends them to an attacker-controlled domain that was still on Salesforce's content allowlist because it had expired and been re-registered. CVSS 9.4. Salesforce enforced Trusted URL allowlists for Agentforce and Einstein AI and re-secured the domain.",
   "external_references": [
    {
     "source_name": "AgentDossier",
     "external_id": "TR-2026-001",
     "url": "https://sushegaad.github.io/AgentDossier/traces/tr-2026-001/"
    },
    {
     "source_name": "The Hacker News",
     "url": "https://thehackernews.com/2025/09/salesforce-patches-critical-forcedleak.html",
     "description": "Salesforce Patches Critical ForcedLeak"
    }
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--e3fcfa99-d3a0-523d-8374-5aa1c3880295",
   "created": "2025-09-25T00:00:00.000Z",
   "modified": "2025-09-25T00:00:00.000Z",
   "name": "Security researchers (Noma Security), proof of concept",
   "roles": [
    "attacker"
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--eb88ead9-bbdc-5a75-8378-32b9a3bcf2c5",
   "created": "2025-09-25T00:00:00.000Z",
   "modified": "2025-09-25T00:00:00.000Z",
   "name": "Salesforce — patched after coordinated disclosure",
   "roles": [
    "defender"
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--c9fc40fd-054c-5ce5-b16c-b8fd1d4c14a5",
   "created": "2025-09-25T00:00:00.000Z",
   "modified": "2025-09-25T00:00:00.000Z",
   "name": "TA0001 Initial Access",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0001"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--15ccfcad-c9cc-5015-8dcc-640d016ce8c5",
   "created": "2025-09-25T00:00:00.000Z",
   "modified": "2025-09-25T00:00:00.000Z",
   "name": "TA0005 Defense Evasion",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0005"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--615c38ad-ad1c-5475-89dc-307d05ec1ce5",
   "created": "2025-09-25T00:00:00.000Z",
   "modified": "2025-09-25T00:00:00.000Z",
   "name": "TA0009 Collection",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0009"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--3face649-5f10-56b5-978c-aee967804ea5",
   "created": "2025-09-25T00:00:00.000Z",
   "modified": "2025-09-25T00:00:00.000Z",
   "name": "TA0010 Exfiltration",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0010"
    }
   ]
  }
 ]
}