PT-2023-23086 · Foundry · Foundry Frontend

Published 2023-08-03 · Updated 2023-08-08 · CVE-2023-30958

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Foundry Frontend versions prior to 6.225.0

Description A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's Content Security Policy (CSP) were to be bypassed.

Recommendations For versions prior to 6.225.0, update to Foundry Frontend 6.225.0 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-83

CWE-79

Related Identifiers

CVE-2023-30958

Affected Products

Foundry Frontend

References · 4

• https://palantir.safebase.us/?tcuUid=5764b094-d3c0-4380-90f2-234f36116c9b · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-30958 · Security Note
• https://osv.dev/vulnerability/CVE-2023-30958 · Vendor Advisory
• https://t.me/cvenotify/55751 · Telegram Post