← Database

CVE-2022-27894

MEDIUM CVSS: 4.8 Published: 2022-11-04 Modified: 2026-06-17

Description

The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Foundry to launch attacks against other users. This vulnerability is resolved in Blobster 3.228.0.

Affected Platforms

Palantir Foundry Blobster

Weakness Type

CWE-79, CWE-79

References