Skip to content
OpenAdvisories
High · 7.7 CVE-2023-22835 EUVD-2023-26946GHSA-cgfq-w4p2-w773

Denial of Service in Foundry Issues

Published Jul 10, 2023 · Updated Oct 29, 2024 · Assigned by Palantir

Description

A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants.

This defect was resolved with the release of Foundry Issues 2.510.0 and Foundry Frontend 6.228.0.

Affected products

VendorProductAffectedFixed
Palantir com.palantir.foundry:foundry-frontend < 6.228.0 6.228.0
Palantir com.palantir.issues:issues < 2.510.0 2.510.0

References