Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Palantir Component: Foundry Frontend Clear all filters
TI-2023-14718 CVE-2023-30963 · GHSA-46hm-73m4-wgrq

Stored XSS in Foundry Slate Query Dropdown menu

Priority LOW 25

A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Foundry's CSP were to be bypassed.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00381 Published 2023-07-10 Fixed in 6.229.0 CWE-82
TI-2023-08990 CVE-2023-22835 · GHSA-cgfq-w4p2-w773

Denial of Service in Foundry Issues

Priority LOW 35

A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00686 Published 2023-07-10 Fixed in 6.228.0, 2.510.0 CWE-20