title: CVE-2023-30949
description: A missing origin validation in Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to phishing attacks.
problem types: The product does not use, or incorrectly uses, an input validation framework that is provided by the source language or an independent library.
affected:
{
vendor: Palantir
product: com.palantir.slate:slate
versions:
version: *, versionType: semver, lessThan: 6.207.0, status: affected
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
baseSeverity: MEDIUM
baseScore: 4.3
]
format: CVSS