A recent penetration test conducted on Salesforce Communities revealed critical vulnerabilities that could allow attackers to take over user accounts.
The security assessment, performed on multiple Salesforce instances, uncovered several issues related to misconfigured objects and broken access controls.
https://cybersecuritynews.com/salesforc ... erability/