Skip to content
OpenAdvisories

Vendor

Palantir

47 known vulnerabilities.

Products

com.palantir.foundry:foundry-frontend 4 Gotham 3 com.palantir.issues:issues 2 com.palantir.acme.gaia:gaia 2 com.palantir.comments:comments 2 sls-logging 1 com.palantir.aries:aries 1 Palantir Gotham Chat IRC helper 1 Foundry Magritte 1 com.palantir.secupload:secure-upload 1 Foundry Build2 1 Foundry Code-Workbooks 1 com.palantir.gotham:external-artifacts 1 Foundry Blobster Service 1 com.palantir.acme:gotham-default-apps-bundle 1 com.palantir.acme:stencil-app-bundle 1 com.palantir.acme:dossier-app 1 com.palantir.compute:compute-service 1 com.palantir.codeassist2:code-assist-proxy 1 Foundry Issues 1 com.palantir.contour:contour-dispatch 1 Foundry Multipass 1 com.palantir.workspace:workspace 1 com.palantir.gotham:blackbird-witchcraft 1 com.palantir.skywise:guardian 1 AtlasDB 1 com.palantir.artifacts:artifacts 1 com.palantir.gotham:glutton 1 com.palantir.lime:lime2 1 Foundry Magritte plugin osisoft-pi-web-connector 1 com.palantir.tiles:tiles 1 com.palantir.acme.cerberus:cerberus 1 com.palantir.slate:slate 1 com.palantir.meta:orbital-simulator 1 com.palantir.magritte:magritte-rest-source-bundle 1 com.palantir.foundry.jobtracker:job-tracker 1 com.palantir.campaigns:campaigns 1 com.palantir.acme:gotham-fe-bundle 1 com.palantir.acme:titanium-browser-app-bundle 1 com.palantir.controlpanel:control-panel 1
All Critical High Medium Low Exploited only Public exploit

47 results · Feed

  • Medium 6.3
    CVE-2022-48308

    It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net…

    Palantir sls-logging
  • Medium 4.2
    CVE-2022-27895

    A component in Foundry logging was found to be capturing sensitive information in logs.

    Information Exposure Through Log Files vulnerability discovered in Foundry when logs were captured using an underlying library known as Build2. This issue was present in versions earlier than 1.785.0. Upgrade to Build2 version 1.785.0 or greater.

    Palantir Foundry Build2
  • Medium 4.2
    CVE-2022-27896

    The Foundry Code-Workbooks service was found to contain an issue leading to information disclosure.

    Information Exposure Through Log Files vulnerability discovered in Foundry Code-Workbooks where the endpoint backing that console was generating service log records of any Python code being run. These service logs included the Foundry token that represents th…

    Palantir Foundry Code-Workbooks
  • Medium 4.8
    CVE-2022-27894

    The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability.

    The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Foundry to launch attacks against other users. This vulnerability is resolved in Blobster 3.228.0.

    Palantir Foundry Blobster Service
  • Medium 4.2
    CVE-2022-27893

    The Foundry Magritte plugin osisoft-pi-web-connector was found to be logging in a manner that captured authentication requests.

    The Foundry Magritte plugin osisoft-pi-web-connector versions 0.15.0 - 0.43.0 was found to be logging in a manner that captured authentication requests. This vulnerability is resolved in osisoft-pi-web-connector version 0.44.0.

    Palantir Foundry Magritte plugin osisoft-pi-web-connector
  • Medium 5.3
    CVE-2022-27889

    The Foundry Multipass service contains code paths that could be abused to cause a denial of service for authentication and authorization operations.

    The Multipass service was found to have code paths that could be abused to cause a denial of service for authentication or authorization operations. A malicious attacker could perform an application-level denial of service attack, potentially causing authenti…

    Palantir Foundry Multipass
  • Medium 5.5
    CVE-2022-27888

    The Foundry Issues service was found to be logging in a manner that captured session tokens.

    Foundry Issues service versions 2.244.0 to 2.249.0 was found to be logging in a manner that captured sensitive information (session tokens). This issue was fixed in 2.249.1.

    Palantir Foundry Issues