CVE-2023-30949
CVE-2023-30949

4.3MEDIUM

Key Information:

Vendor

Palantir

Status
Com.palantir.slate:slate
Vendor
CVE Published:
26 July 2023

What is CVE-2023-30949?

A missing origin validation in Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to phishing attacks.

Affected Version(s)

com.palantir.slate:slate * < 6.207.0

References

https://palantir.safebase.us/?tcuUid=bbc1772c-e10a-45cc-b...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.