Vulnerabilities

TI-2023-08990 CVE-2023-22835 · GHSA-cgfq-w4p2-w773

Denial of Service in Foundry Issues

LOW 35

A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00686 Published 2023-07-10 Fixed in 6.228.0, 2.510.0 CWE-20

TI-2023-14704 CVE-2023-30946 · GHSA-63fq-r3mp-fpcf

Issues notification metadata lacks authorization

LOW 20

A security defect was identified in Foundry Issues.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00393 Published 2023-06-29 Fixed in 2.497.0 CWE-288

TI-2022-10768 CVE-2022-27888 · GHSA-cwq5-9fp6-j489

The Foundry Issues service was found to be logging in a manner that captured session tokens.

LOW 24

Foundry Issues service versions 2.244.0 to 2.249.0 was found to be logging in a manner that captured sensitive information (session tokens).

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00233 Published 2022-04-26 No fix listed CWE-532

Vulnerabilities

Filters

Denial of Service in Foundry Issues

Issues notification metadata lacks authorization

The Foundry Issues service was found to be logging in a manner that captured session tokens.