Palantir

Foundry Comments

2 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2023-30956

  • EPSS 0.2%
  • Veröffentlicht 10.07.2023 22:15:09
  • Zuletzt bearbeitet 21.11.2024 08:01:09

A security defect was identified in Foundry Comments that enabled a user to discover the contents of an attachment submitted to another comment if they knew the internal UUID of the target attachment. This defect was resolved with the release of Foun...

6.5

CVE-2023-30948

  • EPSS 0.25%
  • Veröffentlicht 06.06.2023 15:15:09
  • Zuletzt bearbeitet 21.11.2024 08:01:08

A security defect in Foundry's Comments functionality resulted in the retrieval of attachments to comments not being gated by additional authorization checks. This could enable an authenticated user to inject a prior discovered attachment UUID into o...