Foundry
Monthly
Server-side request forgery in Azure AI Foundry allows remote unauthenticated attackers to cause high confidentiality loss by making the service fetch attacker-controlled URLs. Microsoft applies the fix server-side, requiring no customer action, and no public exploit has been identified at time of analysis.
A security defect was discovered in Foundry Issues that enabled users to create convincing phishing links by editing the request sent when creating an Issue. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Palantir Foundry deployments running Lime2 versions between 2.519.0 and 2.532.0 were vulnerable a bug that allowed authenticated users within a Foundry organization to bypass discretionary or. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Server-side request forgery in Azure AI Foundry allows remote unauthenticated attackers to cause high confidentiality loss by making the service fetch attacker-controlled URLs. Microsoft applies the fix server-side, requiring no customer action, and no public exploit has been identified at time of analysis.
A security defect was discovered in Foundry Issues that enabled users to create convincing phishing links by editing the request sent when creating an Issue. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Palantir Foundry deployments running Lime2 versions between 2.519.0 and 2.532.0 were vulnerable a bug that allowed authenticated users within a Foundry organization to bypass discretionary or. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.