Code injection

A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants. This defect was resolved with the release of Foundry Issues 2.510.0 and Found...

CVE-2023-30956 IDOR in Foundry Comments allows retrieval of attachments

A security defect was identified in Foundry Comments that enabled a user to discover the contents of an attachment submitted to another comment if they knew the internal UUID of the target attachment. This defect was resolved with the release of Foundry Comments 2.267.0...

CVE-2023-30956

The CVE-2023-30956 entry concerns Palantir Foundry Comments where an issue allowed a user to retrieve the contents of an attachment submitted to another comment by knowing the target attachment’s internal UUID. The root cause is an insecure IDOR-like access path that exposes attachment contents. ...

CVE-2023-30956 IDOR in Foundry Comments allows retrieval of attachments

A security defect was identified in Foundry Comments that enabled a user to discover the contents of an attachment submitted to another comment if they knew the internal UUID of the target attachment. This defect was resolved with the release of Foundry Comments 2.267.0...

CVE-2023-30960 Insecure Direct Object Reference (IDOR) in Foundry job-tracker

A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further...

CVE-2023-30960

CVE-2023-30960 affects Palantir Foundry’s job-tracker and is an insecure direct object reference (IDOR) vulnerability. The issue allowed querying metadata for builds on resources that users should not access. Root cause details in connected sources indicate a security defect within Foundry job-tr...

CVE-2023-30960 Insecure Direct Object Reference (IDOR) in Foundry job-tracker

A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further...

CVE-2023-30963 Stored XSS in Foundry Slate Query Dropdown menu

A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.229.0. The service was rolled out to all affected Foundry instances. No further...

CVE-2023-30963 Stored XSS in Foundry Slate Query Dropdown menu

A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.229.0. The service was rolled out to all affected Foundry instances. No further...

CVE-2023-30963

CVE-2023-30963 describes a Stored XSS vulnerability in Palantir Foundry Frontend (Slate component) that could be exploited if CSP protections were bypassed. Affected software is Foundry Frontend; the root cause is an XSS weakness in Slate dropdown handling when CSP is not properly enforced. The v...

CVE-2023-22835 Denial of Service in Foundry Issues

A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants. This defect was resolved with the release of Foundry Issues 2.510.0 and Found...

CVE-2023-22835

Foundry Issues under CVE-2023-22835 allows a Denial of Service via submitting malformed data in an Issue, causing loss of frontend functionality for all participants. Affected versions are Foundry Issues prior to 2.510.0 and Foundry Frontend prior to 6.228.0. Remediation per PT/RedHat/NVD sources...

CVE-2023-22835 Denial of Service in Foundry Issues

A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants. This defect was resolved with the release of Foundry Issues 2.510.0 and Found...

Palantir Foundry job-tracker 安全漏洞

Palantir Foundry is a business process management platform from US-based Palantir. A security vulnerability exists in Palantir Foundry job-tracker. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

PT-2023-23085 · Unknown · Foundry Comments

Name of the Vulnerable Software and Affected Versions: Foundry Comments versions prior to 2.267.0 Description: A security defect was identified in Foundry Comments that enabled a user to discover the contents of an attachment submitted to another comment if they knew the internal UUID of the targ...

Palantir Foundry Issues 安全漏洞

Palantir Foundry is a business process management platform from Palantir, Inc. in the United States. A security vulnerability exists in Palantir Foundry Issues. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

Palantir Foundry Issues 安全漏洞

Palantir Foundry Issues is an application from Palantir USA. A security vulnerability exists in Palantir Foundry Issues. An attacker could exploit the vulnerability to obtain sensitive information...

Palantir Foundry 跨站脚本漏洞

Palantir Foundry is a business process management platform from US-based Palantir. A security vulnerability exists in Palantir Foundry Frontend. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

PT-2023-18717 · Unknown · Foundry Frontend +1

Name of the Vulnerable Software and Affected Versions: Foundry Issues versions prior to 2.510.0 Foundry Frontend versions prior to 6.228.0 Description: A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an...

USN-6060-1: MySQL vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.33 in Ubuntu 20.04 LTS,...