CVE-2023-30958 DOM XSS in Developer mode dashboard via redirect GET parameter
Attacker can execute DOM XSS in Foundry Frontend developer dashboard if CSP is bypassed, requiring upgrade to fix.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2023-30958?
CVE-2023-30958 is a medium-severity cross-site scripting vulnerability in com.palantir.foundry:foundry-frontend, published on 3 Aug 2023. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's CSP were to be bypassed.
This defect was resolved with the release of Foundry Frontend 6.225.0.
Which versions are affected by CVE-2023-30958?
It affects 1 product.
Products include Zabbix Frontend.
How do I fix CVE-2023-30958?
No fix has been published for CVE-2023-30958 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2023-30958 being exploited?
There is no known exploitation of CVE-2023-30958 in the wild and no public exploit code.
Other vulnerabilities in com.palantir.foundry:foundry-frontend
- CVE-2023-32725 Leak of zbx_session cookie when using a scheduled report that includes a dashboard with a URL widget.
- CVE-2025-27232 Frontend arbitrary file read in oauth.authorize action
- CVE-2023-29457 Insufficient validation of Action form input fields
- CVE-2025-49643 Frontend DoS vulnerability due to asymmetric resource consumption
- CVE-2023-29456 Inefficient URL schema validation
Sources
Also known as GHSA-h7r6-9754-jpv8.