CVE-2023-22834

Publication date

2023-06-26 23:06:00

Family

Palantir

State

PUBLISHED

Description

The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the attacker would otherwise not have permission to create.