Palantir Vulnerabilities and Affected Products
Vulnerabilities associated with com.palantir.foundry.jobtracker:job-tracker.
Products
Clear product- com.palantir.foundry:foundry-frontend4 vulnerabilities
- Gotham3 vulnerabilities
- com.palantir.acme.gaia:gaia2 vulnerabilities
- com.palantir.comments:comments2 vulnerabilities
- com.palantir.issues:issues2 vulnerabilities
- AtlasDB1 vulnerability
- com.palantir.acme.cerberus:cerberus1 vulnerability
- com.palantir.acme:dossier-app1 vulnerability
- com.palantir.acme:gotham-default-apps-bundle1 vulnerability
- com.palantir.acme:gotham-fe-bundle1 vulnerability
- com.palantir.acme:stencil-app-bundle1 vulnerability
- com.palantir.acme:titanium-browser-app-bundle1 vulnerability
- com.palantir.apollo:autopilot1 vulnerability
- com.palantir.aries:aries1 vulnerability
- com.palantir.artifacts:artifacts1 vulnerability
- com.palantir.campaigns:campaigns1 vulnerability
- com.palantir.codeassist2:code-assist-proxy1 vulnerability
- com.palantir.compute:compute-service1 vulnerability
- com.palantir.contour:contour-dispatch1 vulnerability
- com.palantir.controlpanel:control-panel1 vulnerability
- com.palantir.foundry.jobtracker:job-tracker1 vulnerability
- com.palantir.gotham:blackbird-witchcraft1 vulnerability
- com.palantir.gotham:clips21 vulnerability
- com.palantir.gotham:external-artifacts1 vulnerability
- com.palantir.gotham:glutton1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-30960MEDIUM | Insecure Direct Object Reference (IDOR) in Foundry job-trackerA security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further intervention is required. | CVSS4.3v3.1 | EPSS0.402% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |