A missing origin validation in Slate sandbox could be exploited by a malicious user to modify the pages content, which could lead to phishing attacks.
Weakness
The product does not use, or incorrectly uses, an input validation framework that is provided by the source language or an independent library.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Slate | Palantir | * | 6.207.0 (excluding) |