VulnerabilityModified

CVE-2023-30948

This could enable an authenticated user to inject a prior discovered attachment UUID into other arbitrary comments to discover it's content.

MEDIUM 6.5EPSS 0.54%

Does this matter?

Lower severity and a low EPSS score (0.54%). Track it; it rarely justifies an emergency change on its own.

Description

A security defect in Foundry's Comments functionality resulted in the retrieval of attachments to comments not being gated by additional authorization checks. This could enable an authenticated user to inject a prior discovered attachment UUID into other arbitrary comments to discover it's content. This defect was fixed in Foundry Comments 2.249.0, and a patch was rolled out to affected Foundry environments. No further intervention is required at this time.

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.54% probability · 44th percentile
CISA KEV: Not listed
Weakness: CWE-285, CWE-862
Affected: palantir/foundry comments
Source: cve-coordination@palantir.com

References

https://palantir.safebase.us/?tcuUid=101b083b-6389-4261-98f8-23448e133a62Vendor Advisory
https://palantir.safebase.us/?tcuUid=101b083b-6389-4261-98f8-23448e133a62Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.