Palantir Public · Report #1525200
SQL Injection at https://files.palantir.com/ due to CVE-2021-38159
Validstatus
highseverity
121upvotes
5 Apr 2022disclosed
Summary
A vulnerability was discovered in an Internet-facing asset (files.palantir.com). A proof of concept (POC) was developed and used to validate the finding. The vulnerability was patched and resolved.
Blog about this vulnerability published. You can read full detail here: https://blog.viettelcybersecurity.com/moveit-transfer-cve/
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.