Skip to content
OpenAdvisories
Medium · 5.0 CVE-2023-30952 EUVD-2023-35290GHSA-f7vf-674j-p83m

Foundry Issues reporterPath phishing by parameter injection

Published Aug 3, 2023 · Updated Oct 9, 2024 · Assigned by Palantir

Description

A security defect was discovered in Foundry Issues that enabled users to create convincing phishing links by editing the request sent when creating an Issue. This defect was resolved in Frontend release 6.228.0 .

Affected products

VendorProductAffectedFixed
Palantir com.palantir.foundry:foundry-frontend — —

References