CVE-2023-30945: Path Traversal
Multiple Services such as VHS(Video History Server) and VCD(Video Clip Distributor) and Clips2 were discovered to be vulnerable to an unauthenticated arbitrary file read/write vulnerability due to missing input validation on filenames. A malicious attacker could read sensitive files from the filesystem or write/delete arbitrary files on the filesystem as well.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-30945?
CVE-2023-30945 is a vulnerability that affects multiple services such as VHS (Video History Server), VCD (Video Clip Distributor), and Clips2. It allows an unauthenticated attacker to read and write arbitrary files due to missing input validation on filenames.
Which software is affected by CVE-2023-30945?
CVE-2023-30945 affects Palantir Clips2, Palantir Video Clip Distributor, and Palantir Video History Service.
What is the severity level of CVE-2023-30945?
CVE-2023-30945 has a severity level of critical with a CVSS score of 9.8.
How can an attacker exploit CVE-2023-30945?
An attacker can exploit CVE-2023-30945 by sending requests with crafted filenames to the vulnerable services, allowing them to read and write arbitrary files.
Is there a fix available for CVE-2023-30945?
To fix CVE-2023-30945, it is recommended to update the affected software versions to the patched releases provided by Palantir.