CVE-2023-30946
Low
Description
A security defect was identified in Foundry Issues. If a user was added to an issue on a resource that they did not have access to and consequently could not see, they could query Foundry's Notification API and receive metadata about the issue including the RID of the issue, severity, internal UUID of the author, and the user-defined title of the issue.
SeverityLow
CVSS3.5
Exploit probability—
ProductPalantir Foundry Issues
PublishedJun 29, 2023
First seenJun 29, 2023
Weakness typeCWE-420CWE-420CWE-288CWE-288
How to fix
Update
- palantir foundry_issues2.497.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| palantir foundry_issues | v < 2.497.0 | 2.497.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.