Palantir Foundry vulnerabilities

• palantir foundry, com.palantir.foundry:foundry-frontend +1 more Foundry Issues reporterPath phishing by parameter injection CVE-2023-30952 5.0 MediumAugust 3, 2023
• palantir foundry campaigns, com.palantir.campaigns:campaigns +1 more CVE-2023-30950 CVE-2023-30950 6.5 MediumAugust 3, 2023
• zabbix frontend, palantir com.palantir.foundry:foundry-frontend +1 more DOM XSS in Developer mode dashboard via redirect GET parameter CVE-2023-30958 4.7 MediumAugust 3, 2023
• palantir foundry comments, com.palantir.comments:comments +1 more IDOR in Foundry Comments allows retrieval of attachments CVE-2023-30956 5.3 MediumJuly 10, 2023
• palantir foundry job-tracker, com.palantir.foundry.jobtracker:job-tracker +1 more Insecure Direct Object Reference (IDOR) in Foundry job-tracker CVE-2023-30960 4.3 MediumJuly 10, 2023
• palantir foundry frontend, com.palantir.foundry:foundry-frontend +1 more Stored XSS in Foundry Slate Query Dropdown menu CVE-2023-30963 5.4 MediumJuly 10, 2023
• palantir foundry frontend, foundry issues, com.palantir.foundry:foundry-frontend +1 more +3 more Denial of Service in Foundry Issues CVE-2023-22835 7.7 HighJuly 10, 2023
• palantir foundry issues, com.palantir.issues:issues +1 more Issues notification metadata lacks authorization CVE-2023-30946 3.5 LowJune 29, 2023
• palantir foundry workspace-server, com.palantir.workspace:workspace +1 more Foundry workspace-server Developer Mode Authorization Bypass CVE-2023-30955 4.3 MediumJune 29, 2023
• palantir foundry, com.palantir.lime:lime2 +1 more Mandatory control bypass in Lime2 CVE-2023-22833 7.6 HighJune 6, 2023
• palantir foundry comments, com.palantir.comments:comments +1 more Retrieval of Attachments to Comments lacks Authorization CVE-2023-30948 6.5 MediumJune 6, 2023
• palantir magritte-ftp, foundry magritte +1 more It was discovered that the Magritte-ftp was not verifying hostnames in TLS certificates due to a... CVE-2022-48307 6.3 MediumFebruary 16, 2023
• palantir foundry build2 A component in Foundry logging was found to be capturing sensitive information in logs. CVE-2022-27895 4.2 MediumNovember 15, 2022
• palantir foundry code-workbooks The Foundry Code-Workbooks service was found to contain an issue leading to information disclosure. CVE-2022-27896 4.2 MediumNovember 14, 2022
• palantir foundry blobster service, foundry blobster +1 more The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability. CVE-2022-27894 4.8 MediumNovember 4, 2022
• osisoft-pi-web-connector project osisoft-pi-web-connector, palantir foundry magritte plugin osisoft-pi-web-connector +1 more The Foundry Magritte plugin osisoft-pi-web-connector was found to be logging in a manner that captured authentication requests. CVE-2022-27893 4.2 MediumNovember 4, 2022
• palantir foundry multipass The Foundry Multipass service contains code paths that could be abused to cause a denial of service for authentication and authorization operations. CVE-2022-27889 5.3 MediumJune 14, 2022
• palantir foundry issues The Foundry Issues service was found to be logging in a manner that captured session tokens. CVE-2022-27888 5.5 MediumApril 26, 2022