CVE-2023-22835

Denial of Service in Foundry Issues

State: Published
Severity: 7.7 High
Published: Jul 10, 2023
Updated: Oct 29, 2024
Reserved: Jan 6, 2023

Description

A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants.

This defect was resolved with the release of Foundry Issues 2.510.0 and Foundry Frontend 6.228.0.

Scores

CVSS	Score	Vector	Source
3.1	7.7 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H	Palantir

Weaknesses

CWE-20 The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected Products

Product	Versions
com.palantir.foundry:foundry-frontendPalantir	before 6.228.0Affected
com.palantir.issues:issuesPalantir	before 2.510.0Affected

References

https://palantir.safebase.us/?tcuUid=0e2e79bd-cc03-42a8-92c2-c0e68a1ea53d

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.