Skip to content

Product

Palantir foundry comments vulnerabilities

2 published CVES affecting Palantir foundry comments, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest Palantir foundry comments CVEs

Newest publication first

  1. CVE-2023-30956 IDOR in Foundry Comments allows retrieval of attachments

    Published
    MediumCVSS 5.3 EPSS 0.46%

    A security defect was identified in Foundry Comments that enabled a user to discover the contents of an attachment submitted to another comment if they knew the internal UUID of the target attachment. This defect was resolved with the release of Foundry Comments 2.267.0.

  2. CVE-2023-30948 Retrieval of Attachments to Comments lacks Authorization

    Published
    MediumCVSS 6.5 EPSS 0.54%

    A security defect in Foundry's Comments functionality resulted in the retrieval of attachments to comments not being gated by additional authorization checks. This could enable an authenticated user to inject a prior discovered attachment UUID into other arbitrary comments to dis...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.