Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2023-30962

Stored XSS in cerberus attachments

Description

The Gotham Cerberus service was found to have a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Gotham to launch attacks against other users. This vulnerability is resolved in Cerberus 100.230704.0-27-g031dd58 .

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palantir com.palantir.acme.cerberus:cerberus

  • * to < 100.230704.0-27-g031dd58affected

References