CVE-2023-30949

Medium

A missing origin validation in Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to…

Palantir·CWE-1173·Published 2023-07-26

CVSS

5.3

EPSS

0.00

KEV

Exploits

cve.orgen

151 chars

A missing origin validation in Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to phishing attacks.

NVDen

151 chars

A missing origin validation in Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to phishing attacks.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
3.1	Primary	cve.org	4.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N