CVE-2023-22835highCWE-20

CVE-2023-22835: falha de alta gravidade em Palantir com.palantir.foundry:foundry-frontend

Denial of Service in Foundry Issues

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar com.palantir.foundry:foundry-frontend+ Monitorar com.palantir.issues:issues

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.7epss 0.7%
A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants. This defect was resolved with the release of Foundry Issues 2.510.0 and Foundry Frontend 6.228.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Produtos afetados
Palantir · com.palantir.foundry:foundry-frontendPalantir · com.palantir.issues:issues
CVEs relacionadas — Palantir com.palantir.foundry:foundry-frontend

No mesmo produto, das mais perigosas para as menos.

CVE-2023-30952MEDIUMFoundry Issues reporterPath phishing by parameter injectionEPSS 0.4%CVE-2023-30958MEDIUMDOM XSS in Developer mode dashboard via redirect GET parameterEPSS 0.4%CVE-2023-30946LOWIssues notification metadata lacks authorizationEPSS 0.4%CVE-2023-30963MEDIUMStored XSS in Foundry Slate Query Dropdown menuEPSS 0.4%