CVE-2023-30952mediumCWE-20

CVE-2023-30952: medium-severity vulnerability in Palantir com.palantir.foundry:foundry-frontend

Foundry Issues reporterPath phishing by parameter injection

Published · Updated

Follow this CVE+ Monitor com.palantir.foundry:foundry-frontend

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5epss 0.4%
A security defect was discovered in Foundry Issues that enabled users to create convincing phishing links by editing the request sent when creating an Issue. This defect was resolved in Frontend release 6.228.0 .
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Affected products
Palantir · com.palantir.foundry:foundry-frontend
Related CVEs — Palantir com.palantir.foundry:foundry-frontend

In the same product, most dangerous first.

CVE-2023-22835HIGHDenial of Service in Foundry IssuesEPSS 0.7%CVE-2023-30958MEDIUMDOM XSS in Developer mode dashboard via redirect GET parameterEPSS 0.4%CVE-2023-30963MEDIUMStored XSS in Foundry Slate Query Dropdown menuEPSS 0.4%