CVE-2023-30948

Summary

A security defect in Foundry's Comments functionality resulted in the retrieval of attachments to comments not being gated by additional authorization checks. This could enable an authenticated user to inject a prior discovered attachment UUID into other arbitrary comments to discover it's content.

This defect was fixed in Foundry Comments 2.249.0, and a patch was rolled out to affected Foundry environments. No further intervention is required at this time.

Affected Software

VendorProductVersion RangeStatus
Palantircom.palantir.comments:comments* < 2.249.0affected

Weaknesses

  • CWE-285: The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References