{"id":"CVE-2023-30948","aliases":["EUVD-2023-35286","GHSA-5c5c-cx8g-64x5"],"status":"published","title":"Retrieval of Attachments to Comments lacks Authorization","description":"A security defect in Foundry's Comments functionality resulted in the retrieval of attachments to comments not being gated by additional authorization checks. This could enable an authenticated user to inject a prior discovered attachment UUID into other arbitrary comments to discover it's content.\n\nThis defect was fixed in Foundry Comments 2.249.0, and a patch was rolled out to affected Foundry environments. No further intervention is required at this time.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00536,"percentile":0.4553,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-285","CWE-862"],"published":"2023-06-06T14:12:59Z","modified":"2026-06-17T05:55:58Z","products":[{"vendor":"palantir","product":"com.palantir.comments:comments"},{"vendor":"palantir","product":"foundry_comments"}],"references":[{"url":"https://palantir.safebase.us/?tcuUid=101b083b-6389-4261-98f8-23448e133a62","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-30948"},{"url":"https://github.com/advisories/GHSA-5c5c-cx8g-64x5"}],"sources":{"cve":[{"id":"CVE-2023-30948","title":"Retrieval of Attachments to Comments lacks Authorization","description":"A security defect in Foundry's Comments functionality resulted in the retrieval of attachments to comments not being gated by additional authorization checks. This could enable an authenticated user to inject a prior discovered attachment UUID into other arbitrary comments to discover it's content.\n\nThis defect was fixed in Foundry Comments 2.249.0, and a patch was rolled out to affected Foundry environments. No further intervention is required at this time.","status":"published","published":"2023-06-06T14:12:59.24Z","modified":"2025-01-07T18:15:43.559Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-285"],"updated_at":"2026-11-02T14:35:22.309324Z"}],"euvd":[{"id":"EUVD-2023-35286","description":"A security defect in Foundry's Comments functionality resulted in the retrieval of attachments to comments not being gated by additional authorization checks. This could enable an authenticated user to inject a prior discovered attachment UUID into other arbitrary comments to discover it's content.\n\nThis defect was fixed in Foundry Comments 2.249.0, and a patch was rolled out to affected Foundry environments. No further intervention is required at this time.","status":"published","published":"2023-06-06T14:12:59Z","modified":"2025-01-07T18:15:43Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:24.776491Z"}],"ghsa":[{"id":"GHSA-5c5c-cx8g-64x5","title":"A security defect in Foundry's Comments functionality resulted in the retrieval of attachments to...","description":"A security defect in Foundry's Comments functionality resulted in the retrieval of attachments to comments not being gated by additional authorization checks. This could enable an authenticated user to inject a prior discovered attachment UUID into other arbitrary comments to discover it's content.\n\nThis defect was fixed in Foundry Comments 2.249.0, and a patch was rolled out to affected Foundry environments. No further intervention is required at this time.","status":"published","published":"2023-06-06T15:30:21Z","modified":"2024-04-11T21:13:53Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-285","CWE-862"],"updated_at":"2026-11-02T14:57:08.55794Z"}],"nvd":[{"id":"CVE-2023-30948","description":"A security defect in Foundry's Comments functionality resulted in the retrieval of attachments to comments not being gated by additional authorization checks. This could enable an authenticated user to inject a prior discovered attachment UUID into other arbitrary comments to discover it's content.\n\nThis defect was fixed in Foundry Comments 2.249.0, and a patch was rolled out to affected Foundry environments. No further intervention is required at this time.","status":"published","published":"2023-06-06T15:15:09.35Z","modified":"2026-06-17T05:55:58.043Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-285","CWE-862"],"updated_at":"2026-11-02T14:08:05.329837Z"}]}}