cve.bz

CVE-2023-22834

4.3 mediumEPSS 0.4%

Medium (4.3) in palantir contour. EPSS 0.4% chance of exploitation in the next 30 days.

The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the attacker would otherwise not have permission to create.

Severity

CVSS 3.1

4.3 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS
0.4% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWEs
CWE-862, CWE-425
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON