Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-30955 EUVD-2023-35293GHSA-r32w-vrgx-96x6

Foundry workspace-server Developer Mode Authorization Bypass

Published Jun 29, 2023 · Updated Oct 28, 2024 · Assigned by Palantir

Description

A security defect was identified in Foundry workspace-server that enabled a user to bypass an authorization check and view settings related to 'Developer Mode'. This enabled users with insufficient privilege the ability to view and interact with Developer Mode settings in a limited capacity. A fix was deployed with workspace-server 7.7.0.

Affected products

VendorProductAffectedFixed
Palantir com.palantir.workspace:workspace < 7.7.0 7.7.0

References