CVE-2022-27896

Information Exposure Through Log Files vulnerability discovered in Foundry Code-Workbooks where the endpoint backing that console was generating service log records of any Python code being run. These service logs included the Foundry token that represents the Code-Workbooks Python console. Upgra...

Design/Logic Flaw

Information Exposure Through Log Files vulnerability discovered in Foundry Code-Workbooks where the endpoint backing that console was generating service log records of any Python code being run. These service logs included the Foundry token that represents the Code-Workbooks Python console. Upgra...

CVE-2022-27896 The Foundry Code-Workbooks service was found to contain an issue leading to information disclosure.

Information Exposure Through Log Files vulnerability discovered in Foundry Code-Workbooks where the endpoint backing that console was generating service log records of any Python code being run. These service logs included the Foundry token that represents the Code-Workbooks Python console. Upgra...

CVE-2022-27896 The Foundry Code-Workbooks service was found to contain an issue leading to information disclosure.

Information Exposure Through Log Files vulnerability discovered in Foundry Code-Workbooks where the endpoint backing that console was generating service log records of any Python code being run. These service logs included the Foundry token that represents the Code-Workbooks Python console. Upgra...

CVE-2022-27896

Summary: CVE-2022-27896 affects Palantir Foundry Code-Workbooks. The vulnerability arises from the endpoint backing the Code-Workbooks Python console generating service logs that included the Foundry token, causing information exposure via log files. Affected versions: Code-Workbooks 4.144 throug...

Palantir 日志信息泄露漏洞

Palantir is a data platform from Palantir, Inc. that reimagines how people use data by removing the barriers between back-end data management and front-end data analysis. A log information disclosure vulnerability exists in Palantir Foundry Code-Workbooks versions 4.144 through 4.460.0, which...

CVE-2022-27894

The Foundry Blobster service was found to have a cross-site scripting XSS vulnerability that could have allowed an attacker with access to Foundry to launch attacks against other users. This vulnerability is resolved in Blobster 3.228.0...

CVE-2022-27894

The Foundry Blobster service was found to have a cross-site scripting XSS vulnerability that could have allowed an attacker with access to Foundry to launch attacks against other users. This vulnerability is resolved in Blobster 3.228.0...

Cross site scripting

The Foundry Blobster service was found to have a cross-site scripting XSS vulnerability that could have allowed an attacker with access to Foundry to launch attacks against other users. This vulnerability is resolved in Blobster 3.228.0...

CVE-2022-27894

CVE-2022-27894 affects the Foundry Blobster service. A cross-site scripting (XSS) vulnerability could allow an attacker with access to Foundry to launch attacks against other users. The issue is addressed in Blobster version 3.228.0. Practical impact and exploitation details are limited in the pr...

CVE-2022-27894 The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability.

The Foundry Blobster service was found to have a cross-site scripting XSS vulnerability that could have allowed an attacker with access to Foundry to launch attacks against other users. This vulnerability is resolved in Blobster 3.228.0...

CVE-2022-27894 The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability.

The Foundry Blobster service was found to have a cross-site scripting XSS vulnerability that could have allowed an attacker with access to Foundry to launch attacks against other users. This vulnerability is resolved in Blobster 3.228.0...

CVE-2022-27893

The Foundry Magritte plugin osisoft-pi-web-connector versions 0.15.0 - 0.43.0 was found to be logging in a manner that captured authentication requests. This vulnerability is resolved in osisoft-pi-web-connector version 0.44.0...

Authentication flaw

The Foundry Magritte plugin osisoft-pi-web-connector versions 0.15.0 - 0.43.0 was found to be logging in a manner that captured authentication requests. This vulnerability is resolved in osisoft-pi-web-connector version 0.44.0...

CVE-2022-27893 The Foundry Magritte plugin osisoft-pi-web-connector was found to be logging in a manner that captured authentication requests.

The Foundry Magritte plugin osisoft-pi-web-connector versions 0.15.0 - 0.43.0 was found to be logging in a manner that captured authentication requests. This vulnerability is resolved in osisoft-pi-web-connector version 0.44.0...

CVE-2022-27893

The CVE-2022-27893 issue affects the Foundry Magritte plugin osisoft-pi-web-connector, specifically versions 0.15.0 through 0.43.0. The root cause involves logging that captured authentication requests, impacting confidentiality (per CVSS data), with a reported base score of 4.2 (Medium). The vul...

CVE-2022-27893 The Foundry Magritte plugin osisoft-pi-web-connector was found to be logging in a manner that captured authentication requests.

The Foundry Magritte plugin osisoft-pi-web-connector versions 0.15.0 - 0.43.0 was found to be logging in a manner that captured authentication requests. This vulnerability is resolved in osisoft-pi-web-connector version 0.44.0...

Palantir 跨站脚本漏洞

Palantir is a data platform from Palantir, Inc. that reimagines how people use data by removing the barriers between back-end data management and front-end data analysis. A cross-site scripting vulnerability exists in Palantir Foundry Blobster prior to version 3.228.0 that stems from the presence...

Palantir 日志信息泄露漏洞

Palantir is a data platform from US-based Palantir that reimagines how people use data by removing the barriers between back-end data management and front-end data analysis. A security vulnerability exists in Palantir Foundry Magritte plugin osisoft-pi-web-connector prior to version 0.44.0, which...

PT-2022-18673 · Foundry · Blobster

Name of the Vulnerable Software and Affected Versions: The Foundry Blobster versions prior to 3.228.0 Description: A cross-site scripting XSS issue was discovered in the Foundry Blobster service, potentially allowing an attacker with access to Foundry to launch attacks against other users...