Skip to content
OpenAdvisories
Medium · 4.8 CVE-2022-27894 EUVD-2022-32382GHSA-3prr-8gr9-v5cq

The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability.

Published Nov 4, 2022 · Updated May 2, 2025 · Assigned by Palantir

Description

The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Foundry to launch attacks against other users. This vulnerability is resolved in Blobster 3.228.0.

Affected products

VendorProductAffectedFixed
Palantir Foundry Blobster Service unspecified – < 3.227.0, next of 3.207.0 – < unspecified 3.227.0

References