Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2023-30968

Stored XSS in gaia

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Palantir

Description

One of Gotham Gaia services was found to be vulnerable to a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker to bypass CSP and get a persistent cross site scripting payload on the stack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palantir com.palantir.acme.gaia:gaia

  • 100.240108.11 to < *unaffected
  • 100.240203.6 to < *unaffected
  • 100.230807.13 to < *unaffected
  • 100.240205.0-12-gf415217 to < *unaffected
  • 100.231108.82 to < *unaffected
  • 100.231009.47 to < *unaffected
  • 100.240202.9 to < *unaffected

References