HIGH🇵🇱 Wersja polska

CVE-2023-22835

CVSS 7.7v3.1pub. 2023-07-10upd. 2024-11-21

A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants. This defect was resolved with the release of Foundry Issues 2.510.0 and Foundry Frontend 6.228.0.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

  • Palantir Foundry Frontend

    APP
    Palantir
    < 6.228.0

  • Palantir Foundry Issues

    APP
    Palantir
    < 2.510.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2023-30963MEDIUM5.4ten sam produkt

A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slat...

CVE-2022-27888MEDIUM5.5ten sam produkt

Foundry Issues service versions 2.244.0 to 2.249.0 was found to be logging in a manner that captured sensitive...

CVE-2023-30946LOW3.5ten sam produkt

A security defect was identified in Foundry Issues. If a user was added to an issue on a resource that they di...

CVE-2023-30967CRITICAL9.8ten sam vendor

Gotham Orbital-Simulator service prior to 0.692.0 was found to be vulnerable to a Path traversal issue allowin...

CVE-2023-30945CRITICAL9.8ten sam vendor

Multiple Services such as VHS(Video History Server) and VCD(Video Clip Distributor) and Clips2 were discovered...