CVE-2023-30960

CVE-2023-30960 affects Palantir Foundry’s job-tracker and is an insecure direct object reference (IDOR) vulnerability. The issue allowed querying metadata for builds on resources that users should not access. Root cause details in connected sources indicate a security defect within Foundry job-tr...

CVE-2023-30960 Insecure Direct Object Reference (IDOR) in Foundry job-tracker

A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further...

CVE-2023-30960 Insecure Direct Object Reference (IDOR) in Foundry job-tracker

A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further...

CVE-2023-30963 Stored XSS in Foundry Slate Query Dropdown menu

A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.229.0. The service was rolled out to all affected Foundry instances. No further...

CVE-2023-30963 Stored XSS in Foundry Slate Query Dropdown menu

A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.229.0. The service was rolled out to all affected Foundry instances. No further...

CVE-2023-30963

CVE-2023-30963 describes a Stored XSS vulnerability in Palantir Foundry Frontend (Slate component) that could be exploited if CSP protections were bypassed. Affected software is Foundry Frontend; the root cause is an XSS weakness in Slate dropdown handling when CSP is not properly enforced. The v...

CVE-2023-22835 Denial of Service in Foundry Issues

A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants. This defect was resolved with the release of Foundry Issues 2.510.0 and Found...

CVE-2023-22835

Foundry Issues under CVE-2023-22835 allows a Denial of Service via submitting malformed data in an Issue, causing loss of frontend functionality for all participants. Affected versions are Foundry Issues prior to 2.510.0 and Foundry Frontend prior to 6.228.0. Remediation per PT/RedHat/NVD sources...

CVE-2023-22835 Denial of Service in Foundry Issues

A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants. This defect was resolved with the release of Foundry Issues 2.510.0 and Found...

Palantir Foundry 跨站脚本漏洞

Palantir Foundry is a business process management platform from US-based Palantir. A security vulnerability exists in Palantir Foundry Frontend. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

PT-2023-18717 · Unknown · Foundry Frontend +1

Name of the Vulnerable Software and Affected Versions: Foundry Issues versions prior to 2.510.0 Foundry Frontend versions prior to 6.228.0 Description: A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an...

PT-2023-23085 · Unknown · Foundry Comments

Name of the Vulnerable Software and Affected Versions: Foundry Comments versions prior to 2.267.0 Description: A security defect was identified in Foundry Comments that enabled a user to discover the contents of an attachment submitted to another comment if they knew the internal UUID of the targ...

Palantir Foundry Issues 安全漏洞

Palantir Foundry is a business process management platform from Palantir, Inc. in the United States. A security vulnerability exists in Palantir Foundry Issues. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

Palantir Foundry Issues 安全漏洞

Palantir Foundry Issues is an application from Palantir USA. A security vulnerability exists in Palantir Foundry Issues. An attacker could exploit the vulnerability to obtain sensitive information...

PT-2023-23089

Name of the Vulnerable Software and Affected Versions Foundry job-tracker versions prior to 4.645.0 Description A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. Recommendations For versions pri...

PT-2023-23092

Name of the Vulnerable Software and Affected Versions Foundry Frontend versions prior to 6.229.0 Description A security defect was discovered in Foundry Frontend, enabling users to perform Stored XSS attacks in Slate if Foundry's CSP were to be bypassed. The estimated number of potentially affect...

CVE-2023-22835: Improper Input Validation

A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants. This defect was resolved with the release of Foundry Issues 2.510.0 and Found...

CVE-2023-30963: Improper Neutralization of Script in Attributes of IMG Tags in a Web Page

A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.229.0. The service was rolled out to all affected Foundry instances. No further...

Palantir Foundry job-tracker 安全漏洞

Palantir Foundry is a business process management platform from US-based Palantir. A security vulnerability exists in Palantir Foundry job-tracker. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

CVE-2023-30956: Authorization Bypass Through User-Controlled Key

A security defect was identified in Foundry Comments that enabled a user to discover the contents of an attachment submitted to another comment if they knew the internal UUID of the target attachment. This defect was resolved with the release of Foundry Comments 2.267.0...