Skip to content
Sign in
5.3 Medium

CVE-2023-30956 A security defect was identified in Foundry Comments that enabled a user to discover the contents of an attachment…

Description

A security defect was identified in Foundry Comments that enabled a user to discover the contents of an attachment submitted to another comment if they knew the internal UUID of the target attachment. This defect was resolved with the release of Foundry Comments 2.267.0.

Affected products and versions

Product Affected versions Fixed in
com.palantir.comments:comments 2.267 earliest → < 2.267.0 2.267.0

Other CVEs of com.palantir.comments:comments

The 2 CVEs of com.palantir.comments:comments →
CVE-2023-30948 A security defect in Foundry's Comments functionality resulted in the retrieval of attachments to comments not being… 6.5 Medium
Track this CVE