CVE-2023-22835highCWE-20

CVE-2023-22835: high-severity vulnerability in Palantir com.palantir.foundry:foundry-frontend

Denial of Service in Foundry Issues

Published · Updated

Follow this CVE+ Monitor com.palantir.foundry:foundry-frontend+ Monitor com.palantir.issues:issues

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.7epss 0.7%
A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants. This defect was resolved with the release of Foundry Issues 2.510.0 and Foundry Frontend 6.228.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Affected products
Palantir · com.palantir.foundry:foundry-frontendPalantir · com.palantir.issues:issues
Related CVEs — Palantir com.palantir.foundry:foundry-frontend

In the same product, most dangerous first.

CVE-2023-30952MEDIUMFoundry Issues reporterPath phishing by parameter injectionEPSS 0.4%CVE-2023-30958MEDIUMDOM XSS in Developer mode dashboard via redirect GET parameterEPSS 0.4%CVE-2023-30946LOWIssues notification metadata lacks authorizationEPSS 0.4%CVE-2023-30963MEDIUMStored XSS in Foundry Slate Query Dropdown menuEPSS 0.4%