CVE-2023-30949

MEDIUM

Slate - XSS

Title source: llm

Description

A missing origin validation in Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to phishing attacks.

References (1)

[Vendor Advisory] https://palantir.safebase.us/?tcuUid=bbc1772c-e10a-45cc-b89f-48cc1a8b2cfc

Scores

CVSS v3 4.3

EPSS 0.0008

EPSS Percentile 24.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Classification

CWE

CWE-346 CWE-1173

Status published

Affected Products (1)

palantir/slate < 6.207.0

Timeline

Published Jul 26, 2023

Tracked Since Feb 18, 2026