CVE-2022-27894 — The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability.

CVE-2022-27894

The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability. PUBLISHED

Description (CNA)

The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Foundry to launch attacks against other users. This vulnerability is resolved in Blobster 3.228.0.

Affected (CNA)

Vendor / product	Versions
Palantir / Foundry Blobster Service	affected unspecified before 3.227.0; affected next of 3.207.0 before unspecified

CWE

CWE-79

References

https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-04.md

ADP enrichment

CVE

No English description supplied.

https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-04.md

CISA-ADP

No English description supplied.

No references supplied.