What’s Vulnerable › Vulnerabilities

CVE-2023-30945: CVE-2023-30945

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-26 · updated 2026-06-17
• Weakness: CWE-22

Description

Multiple Services such as VHS(Video History Server) and VCD(Video Clip Distributor) and Clips2 were discovered to be vulnerable to an unauthenticated arbitrary file read/write vulnerability due to missing input validation on filenames. A malicious attacker could read sensitive files from the filesystem or write/delete arbitrary files on the filesystem as well.

Affected products

• Palantir Clips2: before 0.111.2 — fixed in 0.111.2
• Palantir Video Clip Distributor: before 0.24.10 — fixed in 0.24.10
• Palantir Video History Service: before 2.210.3 — fixed in 2.210.3

How to fix

Upgrade to a fixed version: Palantir Clips2 0.111.2; Palantir Video Clip Distributor 0.24.10; Palantir Video History Service 2.210.3. Check the vendor advisory for mitigations.

References

• https://palantir.safebase.us/?tcuUid=e62e4dad-b39b-48ba-ba30-7b7c83406ad9
• https://palantir.safebase.us/?tcuUid=e62e4dad-b39b-48ba-ba30-7b7c83406ad9

Get alerted when CVE-2023-30945 or the next vulnerability affects your stack