CVE-2023-30963: falha de média gravidade em Palantir com.palantir.foundry:foundry-frontend
Stored XSS in Foundry Slate Query Dropdown menu
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.4epss 0.4%
A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.229.0. The service was rolled out to all affected Foundry instances. No further intervention is required.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
Palantir · com.palantir.foundry:foundry-frontendCVEs relacionadas — Palantir com.palantir.foundry:foundry-frontend
No mesmo produto, das mais perigosas para as menos.