CVE-2023-30963
Assigner: Palantir
Published: 2023-07-10T21:04:08.584Z
State: PUBLISHED
title: Stored XSS in Foundry Slate Query Dropdown menu
affected: vendor: Palantir
product: com.palantir.foundry:foundry-frontend
versions: version: *
versionType: semver
lessThan: 6.229.0
status: affected
descriptions: value: A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.229.0. The service was rolled out to all affected Foundry instances. No further intervention is required.


impacts: capecId: CAPEC-592
descriptions: value: An adversary utilizes a form of Cross-site Scripting (XSS) where a malicious script is persistently "stored" within the data storage of a vulnerable web application as valid input.
problemTypes: descriptions: cweId: CWE-82
description: The web application does not neutralize or incorrectly neutralizes scripting elements within attributes of HTML IMG tags, such as the src attribute.
type: CWE
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
baseSeverity: MEDIUM
baseScore: 5.4
format: CVSS
source: discovery: EXTERNAL
defect: PLTRSEC-2023-28