CVE-2023-30952: Foundry Issues reporterPath phishing by parameter injection

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-08-03 · updated 2026-06-17
Weakness: CWE-20

Description

A security defect was discovered in Foundry Issues that enabled users to create convincing phishing links by editing the request sent when creating an Issue. This defect was resolved in Frontend release 6.228.0 .

Affected products

Palantir Foundry: before 6.228.0 — fixed in 6.228.0

How to fix

Upgrade to a fixed version: Palantir Foundry 6.228.0. Check the vendor advisory for mitigations.

References

https://palantir.safebase.us/?tcuUid=42bdb7fa-9a6d-4462-b89d-cabc62f281f4
https://palantir.safebase.us/?tcuUid=42bdb7fa-9a6d-4462-b89d-cabc62f281f4

Get alerted when CVE-2023-30952 or the next vulnerability affects your stack