CVE-2023-30956

MEDIUM

5.3

Descricao

A security defect was identified in Foundry Comments that enabled a user to discover the contents of an attachment submitted to another comment if they knew the internal UUID of the target attachment. This defect was resolved with the release of Foundry Comments 2.267.0.

Detalhes CVE

Pontuacao CVSS v3.15.3

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Vetor de ataqueNETWORK

ComplexidadeHIGH

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado7/10/2023

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

palantir:foundry_comments

Fraquezas (CWE)

CWE-639

Referencias

https://palantir.safebase.us/?tcuUid=40367943-738c-4e69-b852-4a503c77478a(cve-coordination@palantir.com)

https://palantir.safebase.us/?tcuUid=40367943-738c-4e69-b852-4a503c77478a(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.