CVE-2023-30963

MEDIUM 5.4CVE-2023-30963 · Published 10/07/2023 · updated 17/06/2026

In short

CVE-2023-30963 is a MEDIUM (CVSS 5.4) vulnerability affecting foundry frontend (palantir).
Chance of exploitation in the next 30 days (EPSS): 0.38%, higher than 32.1% of all vulnerabilities.
Fix: update to 6.229.0 or later.

Package	Affected versions	Patched versions
foundry frontend palantir	`< 6.229.0`	`6.229.0`

Description

A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.229.0. The service was rolled out to all affected Foundry instances. No further intervention is required.

References

palantir.safebase.us · Vendor Advisory

More vulnerabilities in foundry frontend

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free