CVE-2023-22835

Denial of Service in Foundry Issues

High7.7EPSS 0.69%

Published: 10 Jul 2023
Updated: 29 Oct 2024
Reserved: 6 Jan 2023
Assigned by: Palantir

Description

A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants. This defect was resolved with the release of Foundry Issues 2.510.0 and Foundry Frontend 6.228.0.

Scores

CVSS scores of CVE-2023-22835, by who scored it
Scored by	CVSS	Score	Vector
PalantirCNA (assigner)	3.1	High7.7	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
NVDNVD · Modified	3.1	High7.7	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

EPSS (exploitation in 30 days): 0.69% · top 47% of all CVEs (6 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.7.

Weakness

CWE-20: The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. (opens in a new tab)All about CWE-20 and its CVEs

Affected products

Palantir · com.palantir.foundry:foundry-frontend
- affected < 6.228.0
Palantir · com.palantir.issues:issues
- affected < 2.510.0

References (1)

https://palantir.safebase.us/?tcuUid=0e2e79bd-cc03-42a8-92c2-c0e68a1ea53d (opens in a new tab)x_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2023-22835](https://trackcve.app/badge/CVE-2023-22835.svg)](https://trackcve.app/cve/CVE-2023-22835)

Record last updated 29 Oct 2024, 13:43 UTC.