CVE-2023-30958

CVE-2023-30958: Foundry Frontend is affected by a DOM-based XSS vulnerability in the Developer mode dashboard (via redirect GET parameter) that could occur if CSP is bypassed. Root cause involves DOM XSS conditions when CSP protections are bypassed. The issue is resolved in Foundry Frontend 6.225...

CVE-2023-30958 DOM XSS in Developer mode dashboard via redirect GET parameter

A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.225.0...

CVE-2023-30958 DOM XSS in Developer mode dashboard via redirect GET parameter

A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.225.0...

CVE-2023-30951 CVE-2023-30951

The Foundry Magritte plugin rest-source was found to be vulnerable to an an XML external Entity attack XXE...

CVE-2023-30951 CVE-2023-30951

The Foundry Magritte plugin rest-source was found to be vulnerable to an an XML external Entity attack XXE...

CVE-2023-30951

Summary: CVE-2023-30951 concerns the Foundry Magritte plugin rest-source, which is reported to be vulnerable to an XML External Entity (XXE) attack. Affected component: Rest-source plugin for Foundry Magritte (exact versions not specified in the provided documents). Root cause / vulnerability typ...

Palantir Foundry Issues Security Breach

Palantir Foundry Issues is an application from Palantir USA. A security vulnerability exists in Palantir Foundry Issues that stems from a vulnerability that allows an attacker to create a phishing link via a request sent when creating an issue...

Palantir Foundry Code Issue Vulnerability

Palantir Foundry is a business process management platform from US-based Palantir, Inc. A security vulnerability exists in the Palantir Foundry magritte rest-source plugin that stems from the presence of an XML External Entity Injection XXE vulnerability...

PT-2023-23080 · Unknown · Foundry Campaigns Service

Name of the Vulnerable Software and Affected Versions: Foundry Campaigns Service affected versions not specified Description: The issue concerns an unauthenticated information disclosure in a REST endpoint. Recommendations: At the moment, there is no information about a newer version that contain...

PT-2023-23086 · Foundry · Foundry Frontend

Name of the Vulnerable Software and Affected Versions: Foundry Frontend versions prior to 6.225.0 Description: A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's Content Security Policy CSP were to be bypassed...

Palantir Foundry Security Breach

Palantir Foundry is a business process management platform from US-based Palantir. A security vulnerability exists in Foundry Campaigns versions prior to 0.623.0 that stems from an information disclosure vulnerability in the rest endpoint...

PT-2023-23081 · Foundry · The Foundry Magritte Plugin Rest-Source

Name of the Vulnerable Software and Affected Versions: The Foundry Magritte plugin rest-source affected versions not specified Description: The issue is related to an XML external Entity attack XXE in the rest-source plugin. This type of attack allows an attacker to access local or remote content...

Foundry Frontend Cross-Site Scripting Vulnerability

Foundry Frontend is an application from Foundry, Inc. A security vulnerability exists in Foundry Frontend that stems from a vulnerability that allows an attacker to bypass Foundry's CSP and conduct DOM-type cross-site scripting XSS attacks...

GHSA-RRXV-Q8M4-WCH3 .eth registrar controller can shorten the duration of registered names

Description According to the documentation, controllers are allowed to register new domains and extend the expiry of existing domains, but they cannot change the ownership or reduce the expiration time of existing domains. However, a preliminary analysis suggests that an attacker-controlled...

CVE-2023-36503

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Max Foundry WordPress Button Plugin MaxButtons plugin = 9.5.3 versions...

CVE-2023-36503

CVE-2023-36503 affects the WordPress plugin MaxButtons (MaxFoundry) for versions

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in VMware Tanzu Spring Boot

Summary Multiple vulnerabilities in VMware Tanzu Spring Boot used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2023-20883 DESCRIPTION: VMware Tanzu Spring Boot is vulnerable to a denial of service, caused by a flaw when Spring MVC is used together with a...

Allowed calls in LSP6KeyManager doesn't allow calls with empty calldata

Lines of code Vulnerability details Bug Description Whenever a controller attempts to call a LSP0 account's execute function without the relevant SUPER permissions, LSP6ExecuteModule will check that the call is one of the whitelisted allowed calls. If the controller is trying to perform a call wi...

CVE-2023-30963

A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.229.0. The service was rolled out to all affected Foundry instances. No further...

CVE-2023-30960

A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further...