CVE-2023-30949: CVE-2023-30949

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-07-26 · updated 2026-06-17
Weakness: CWE-1173

Description

A missing origin validation in Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to phishing attacks.

Affected products

Palantir com.palantir.slate:slate: before 6.207.0 — fixed in 6.207.0

How to fix

Upgrade to a fixed version: Palantir com.palantir.slate:slate 6.207.0. Check the vendor advisory for mitigations.

References

https://palantir.safebase.us/?tcuUid=bbc1772c-e10a-45cc-b89f-48cc1a8b2cfc
https://palantir.safebase.us/?tcuUid=bbc1772c-e10a-45cc-b89f-48cc1a8b2cfc

Get alerted when CVE-2023-30949 or the next vulnerability affects your stack