4.3
Medium
CVE-2023-30955 A security defect was identified in Foundry workspace-server that enabled a user to bypass an authorization check and…
Description
A security defect was identified in Foundry workspace-server that enabled a user to bypass an authorization check and view settings related to 'Developer Mode'. This enabled users with insufficient privilege the ability to view and interact with Developer Mode settings in a limited capacity. A fix was deployed with workspace-server 7.7.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| com.palantir.workspace:workspace 7.7 | earliest → < 7.7.0 | 7.7.0 |