CVE-2023-30950 CVE-2023-30950

The foundry campaigns service was found to be vulnerable to an unauthenticated information disclosure in a rest endpoint...

CVE-2023-30950

CVE-2023-30950 affects Palantir Foundry Campaigns Service. The issue is an unauthenticated information disclosure in a REST endpoint, exposing confidentiality from the affected component. Public details list Foundry Campaigns versions prior to 0.623.0 as vulnerable (CNNVD) and note an unauthentic...

CVE-2023-30958 DOM XSS in Developer mode dashboard via redirect GET parameter

A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.225.0...

CVE-2023-30958 DOM XSS in Developer mode dashboard via redirect GET parameter

A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.225.0...

CVE-2023-30958

CVE-2023-30958: Foundry Frontend is affected by a DOM-based XSS vulnerability in the Developer mode dashboard (via redirect GET parameter) that could occur if CSP is bypassed. Root cause involves DOM XSS conditions when CSP protections are bypassed. The issue is resolved in Foundry Frontend 6.225...

CVE-2023-30951

Summary: CVE-2023-30951 concerns the Foundry Magritte plugin rest-source, which is reported to be vulnerable to an XML External Entity (XXE) attack. Affected component: Rest-source plugin for Foundry Magritte (exact versions not specified in the provided documents). Root cause / vulnerability typ...

CVE-2023-30951 CVE-2023-30951

The Foundry Magritte plugin rest-source was found to be vulnerable to an an XML external Entity attack XXE...

CVE-2023-30951 CVE-2023-30951

The Foundry Magritte plugin rest-source was found to be vulnerable to an an XML external Entity attack XXE...

Foundry Frontend Cross-Site Scripting Vulnerability

Foundry Frontend is an application from Foundry, Inc. A security vulnerability exists in Foundry Frontend that stems from a vulnerability that allows an attacker to bypass Foundry's CSP and conduct DOM-type cross-site scripting XSS attacks...

Palantir Foundry Issues Security Breach

Palantir Foundry Issues is an application from Palantir USA. A security vulnerability exists in Palantir Foundry Issues that stems from a vulnerability that allows an attacker to create a phishing link via a request sent when creating an issue...

CVE-2023-30951: Improper Restriction of XML External Entity Reference

The Foundry Magritte plugin rest-source was found to be vulnerable to an an XML external Entity attack XXE...

CVE-2023-30958: Improper Neutralization of Script in Attributes in a Web Page

A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.225.0...

Palantir Foundry Code Issue Vulnerability

Palantir Foundry is a business process management platform from US-based Palantir, Inc. A security vulnerability exists in the Palantir Foundry magritte rest-source plugin that stems from the presence of an XML External Entity Injection XXE vulnerability...

PT-2023-23082

Name of the Vulnerable Software and Affected Versions Foundry Issues versions prior to 6.228.0 Description A security defect was discovered in Foundry Issues that enabled users to create convincing phishing links by editing the request sent when creating an Issue. Recommendations For versions pri...

Palantir Foundry Security Breach

Palantir Foundry is a business process management platform from US-based Palantir. A security vulnerability exists in Foundry Campaigns versions prior to 0.623.0 that stems from an information disclosure vulnerability in the rest endpoint...

PT-2023-23086 · Foundry · Foundry Frontend

Name of the Vulnerable Software and Affected Versions: Foundry Frontend versions prior to 6.225.0 Description: A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's Content Security Policy CSP were to be bypassed...

CVE-2023-30950: Authentication Bypass by Spoofing

The foundry campaigns service was found to be vulnerable to an unauthenticated information disclosure in a rest endpoint...

PT-2023-23080 · Unknown · Foundry Campaigns Service

Name of the Vulnerable Software and Affected Versions: Foundry Campaigns Service affected versions not specified Description: The issue concerns an unauthenticated information disclosure in a REST endpoint. Recommendations: At the moment, there is no information about a newer version that contain...

PT-2023-23081 · Foundry · The Foundry Magritte Plugin Rest-Source

Name of the Vulnerable Software and Affected Versions: The Foundry Magritte plugin rest-source affected versions not specified Description: The issue is related to an XML external Entity attack XXE in the rest-source plugin. This type of attack allows an attacker to access local or remote content...

CVE-2023-30952: Improper Input Validation

A security defect was discovered in Foundry Issues that enabled users to create convincing phishing links by editing the request sent when creating an Issue. This defect was resolved in Frontend release 6.228.0...