HIGH🇵🇱 Wersja polska

CVE-2023-22835

CVSS 7.7v3.1pub. 2023-07-10upd. 2024-11-21

A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants. This defect was resolved with the release of Foundry Issues 2.510.0 and Foundry Frontend 6.228.0.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

  • Palantir Foundry Frontend

    APP
    Palantir
    < 6.228.0

  • Palantir Foundry Issues

    APP
    Palantir
    < 2.510.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2023-30963MEDIUM5.4same product

A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slat...

CVE-2022-27888MEDIUM5.5same product

Foundry Issues service versions 2.244.0 to 2.249.0 was found to be logging in a manner that captured sensitive...

CVE-2023-30946LOW3.5same product

Odkryto lukę bezpieczeństwa w Foundry Issues. Jeśli użytkownik został dodany do problemu dotyczącego zasobu, d...

CVE-2023-30967CRITICAL9.8PL ✓same vendor

Path Traversal w Palantir Gotham Orbital-Simulator — nieautoryzowany odczyt plików

CVE-2023-30945CRITICAL9.8PL ✓same vendor

Nieuwierzytelniony odczyt/zapis plików w Palantir VHS, VCD i Clips2