CVE-2023-22834 (published 2023-06-26T23:06:00.892Z)
The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the attacker would otherwise not have permission to create.
Affected products: Vendor: Palantir
Product: com.palantir.contour:contour-dispatch
Versions: *