4.3
Medium
CVE-2023-30960 A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on…
Description
A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further intervention is required.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| com.palantir.foundry.jobtracker:job-tracker 4.645 | earliest → < 4.645.0 | 4.645.0 |