A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.229.0. The service was rolled out to all affected Foundry instances. No further intervention is required.
References
| Link | Resource |
|---|---|
| https://palantir.safebase.us/?tcuUid=3c6b63b7-fb67-4202-a94a-9c83515efb8a | Vendor Advisory |
| https://palantir.safebase.us/?tcuUid=3c6b63b7-fb67-4202-a94a-9c83515efb8a | Vendor Advisory |
Configurations
History
21 Nov 2024, 08:01
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://palantir.safebase.us/?tcuUid=3c6b63b7-fb67-4202-a94a-9c83515efb8a - Vendor Advisory |
18 Jul 2023, 19:42
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
| CPE | cpe:2.3:a:palantir:foundry_frontend:*:*:*:*:*:*:*:* | |
| CWE | CWE-79 | |
| References | (MISC) https://palantir.safebase.us/?tcuUid=3c6b63b7-fb67-4202-a94a-9c83515efb8a - Vendor Advisory | |
| First Time |
Palantir
Palantir foundry Frontend |
10 Jul 2023, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-10 22:15
Updated : 2024-11-21 08:01
NVD link : CVE-2023-30963
Mitre link : CVE-2023-30963
CVE.ORG link : CVE-2023-30963
JSON object : View
Products Affected
palantir
- foundry_frontend