CVE-2023-30952: Foundry Issues reporterPath phishing by parameter injection
A security defect was discovered in Foundry Issues that enabled users to create convincing phishing links by editing the request sent when creating an Issue. This defect was resolved in Frontend release 6.228.0 .
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-30952?
The severity of CVE-2023-30952 is medium with a severity value of 4.3.
How was the security defect in Foundry Issues exploited?
The security defect in Foundry Issues allowed users to create convincing phishing links by editing the request sent when creating an Issue.
Has the security defect in Foundry Issues been resolved?
Yes, the security defect in Foundry Issues has been resolved in Frontend release 6.228.0.
How can I check if my software version is affected by CVE-2023-30952?
You can check if your software version is affected by CVE-2023-30952 by verifying if it is equal to or earlier than version 6.228.0 of Palantir Foundry.
Where can I find more information about CVE-2023-30952?
You can find more information about CVE-2023-30952 at the following reference: [https://palantir.safebase.us/?tcuUid=42bdb7fa-9a6d-4462-b89d-cabc62f281f4](https://palantir.safebase.us/?tcuUid=42bdb7fa-9a6d-4462-b89d-cabc62f281f4)