CVE-2023-30969 Palantir Tiles missing authentication on API endpoints

The Palantir Tiles1 service was found to be vulnerable to an API wide issue where the service was not performing authentication/authorization on all the endpoints...

CVE-2023-30969

The CVE-2023-30969 entry relates to Palantir Tiles1, describing an API-wide authentication/authorization failure across endpoints. Connected sources indicate the vulnerability affects Tiles1, with public reference noting impact on versions earlier than 4.326.0 (CNNVD-202310-2199). The root cause ...