AuraInspector: Open-source tool to audit Salesforce Aura access control misconfigurations

Google and its Mandiant threat intelligence unit have released AuraInspector, an open-source tool aimed at auditing data access paths in Salesforce Experience Cloud applications. The tool focuses on the Aura framework, which underpins many Salesforce user interfaces and plays a central role in how data is retrieved and displayed. Focus on Aura endpoints in Experience Cloud AuraInspector is designed to examine how Salesforce Aura endpoints expose data through standard application functions. Experience Cloud sites rely … More

The post AuraInspector: Open-source tool to audit Salesforce Aura access control misconfigurations appeared first on Help Net Security.

This article has been indexed from Help Net Security

Read the original article: