← CVE Intelligence

CVE-2023-30959

Stored XSS via javascript URI in Apollo Change Requests comment PUBLISHED

Description (CNA)

In Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result in an XSS that require user interaction.

Affected (CNA)

Vendor / productVersions
Palantir / com.palantir.apollo:autopilotaffected * before 3.308.0

CWE

CWE-84

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.