Lucene search
PRIOn knowledge basePRION:CVE-2023-30956HistoryJul 10, 2023 - 10:15 p.m.
Code injection
2023-07-1022:15:00
PRIOn knowledge base
www.prio-n.com
1
code injection
foundry comments
security defect
attachment
uuid
nvd
A security defect was identified in Foundry Comments that enabled a user to discover the contents of an attachment submitted to another comment if they knew the internal UUID of the target attachment. This defect was resolved with the release of Foundry Comments 2.267.0.
| CPE | Name | Operator | Version |
|---|---|---|---|
| foundry_comments | lt | 2.267.0 |
Related
cvelist
cvelist
CVE-2023-30956 IDOR in Foundry Comments allows retrieval of attachments
2023-07-10 21:07:31
cve
cve
CVE-2023-30956
2023-07-10 22:15:09
nvd
nvd
CVE-2023-30956
2023-07-10 22:15:09