CVE-2023-22835 — HIGH (7.7)

Q: How severe is CVE-2023-22835?

CVE-2023-22835 has been rated HIGH with a CVSS base score of 7.7/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2023-22835?

Check the references section above for vendor advisories and patch information. Affected products include: Palantir Foundry Frontend, Palantir Foundry Issues.

Vulnerability Description

A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants. This defect was resolved with the release of Foundry Issues 2.510.0 and Foundry Frontend 6.228.0.

CVSS Score

7.7

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Palantir	Foundry Frontend	< 6.228.0
Palantir	Foundry Issues	< 2.510.0

Related Weaknesses (CWE)

CWE-20

References

https://palantir.safebase.us/?tcuUid=0e2e79bd-cc03-42a8-92c2-c0e68a1ea53dVendor Advisory
https://palantir.safebase.us/?tcuUid=0e2e79bd-cc03-42a8-92c2-c0e68a1ea53dVendor Advisory

FAQ

What is CVE-2023-22835?

CVE-2023-22835 is a vulnerability with a CVSS score of 7.7 (HIGH). A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all ...

How severe is CVE-2023-22835?

CVE-2023-22835 has been rated HIGH with a CVSS base score of 7.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-22835?

Check the references section above for vendor advisories and patch information. Affected products include: Palantir Foundry Frontend, Palantir Foundry Issues.