Read the docs

Palantir

Records47All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Palantir records in CISA KEV

No Palantir vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Foundry Issues 3 records LOW Gotham 3 records MEDIUM Foundry 2 records LOW Foundry Comments 2 records LOW Foundry Frontend 2 records LOW Apollo Autopilot 1 record LOW Atlasdb 1 record LOW Clips2 1 record MEDIUM

Records

2 records in Foundry Comments · all components

TI-2023-14705 CVE-2023-30948 · GHSA-5c5c-cx8g-64x5

Retrieval of Attachments to Comments lacks Authorization

Priority LOW 30

A security defect in Foundry's Comments functionality resulted in the retrieval of attachments to comments not being gated by additional authorization checks.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00536 Published 2023-06-06 Fixed in 2.249.0 CWE-285
TI-2023-14712 CVE-2023-30956 · GHSA-23xf-gc3r-v6rr

IDOR in Foundry Comments allows retrieval of attachments

Priority LOW 24

A security defect was identified in Foundry Comments that enabled a user to discover the contents of an attachment submitted to another comment if they knew the internal UUID of the target attachment.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00455 Published 2023-07-10 Fixed in 2.267.0 CWE-639
Open these records in search →