EUVD-2023-35298

Malicious code in bioql PyPI...

CVE-2023-30960

A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further...

CVE-2023-30960

A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further...

CVE-2023-30960

A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further...

Design/Logic Flaw

A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further...

CVE-2023-30960 Insecure Direct Object Reference (IDOR) in Foundry job-tracker

A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further...

CVE-2023-30960 Insecure Direct Object Reference (IDOR) in Foundry job-tracker

A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further...

CVE-2023-30960

CVE-2023-30960 affects Palantir Foundry’s job-tracker and is an insecure direct object reference (IDOR) vulnerability. The issue allowed querying metadata for builds on resources that users should not access. Root cause details in connected sources indicate a security defect within Foundry job-tr...

Palantir Foundry job-tracker 安全漏洞

Palantir Foundry is a business process management platform from US-based Palantir. A security vulnerability exists in Palantir Foundry job-tracker. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

PT-2023-23089

Name of the Vulnerable Software and Affected Versions Foundry job-tracker versions prior to 4.645.0 Description A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. Recommendations For versions pri...

CVE-2023-30960: Authorization Bypass Through User-Controlled Key

A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further...