Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-43699 EUVD-2025-17663GHSA-3hvp-qhfg-j3vj

Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of required permission che…

Published Jun 10, 2025 · Updated Jun 18, 2025 · Assigned by Salesforce

Vendor: Salesforce Product: OmniStudio

Description

Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of required permission check. 

This impacts OmniStudio: before Spring 2025

Affected products

VendorProductAffectedFixed
Salesforce OmniStudio < Spring 2025 Spring 2025

References