Lucene search

K
nvd[email protected]NVD:CVE-2023-22835
HistoryJul 10, 2023 - 9:15 p.m.

CVE-2023-22835

2023-07-1021:15:10
CWE-20
web.nvd.nist.gov
1
security defect
denial of service attack
foundry issues
foundry frontend
data loss

7.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

27.6%

A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants.

This defect was resolved with the release of Foundry Issues 2.510.0 and Foundry Frontend 6.228.0.

Affected configurations

NVD
Node
palantirfoundry_frontendRange<6.228.0
OR
palantirfoundry_issuesRange<2.510.0

7.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

27.6%

Related for NVD:CVE-2023-22835