VULNERABILITY INTELLIGENCE
CVE-2023-30952
CVSS score5 MEDIUM
EPSS probability0.44%
CISA KEVNot currently listed
Published2023-08-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Description
A security defect was discovered in Foundry Issues that enabled users to create convincing phishing links by editing the request sent when creating an Issue. This defect was resolved in Frontend release 6.228.0 .
Weakness classification
- cve-coordination@palantir.com: CWE-20
- nvd@nist.gov: NVD-CWE-Other
Primary references
- cve-coordination@palantir.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory