CVE-2023-30963
Medium
Description
A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.229.0. The service was rolled out to all affected Foundry instances. No further intervention is required.
SeverityMedium
CVSS5.4
Exploit probability—
ProductPalantir Foundry Frontend
PublishedJul 10, 2023
First seenJul 10, 2023
Weakness typeCWE-82CWE-82
How to fix
Update
- palantir foundry_frontend6.229.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| palantir foundry_frontend | v < 6.229.0 | 6.229.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.