CVE-2023-30960mediumCWE-639

CVE-2023-30960: falha de média gravidade em Palantir com.palantir.foundry.jobtracker:job-tr…

Insecure Direct Object Reference (IDOR) in Foundry job-tracker

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar com.palantir.foundry.jobtracker:job-tracker

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.4%
A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further intervention is required.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Palantir · com.palantir.foundry.jobtracker:job-tracker