CVE-2023-30962 — Stored XSS in cerberus attachments

CVE-2023-30962

Stored XSS in cerberus attachments PUBLISHED

Description (CNA)

The Gotham Cerberus service was found to have a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Gotham to launch attacks against other users. This vulnerability is resolved in Cerberus 100.230704.0-27-g031dd58 .

Affected (CNA)

Vendor / product	Versions
Palantir / com.palantir.acme.cerberus:cerberus	affected * before 100.230704.0-27-g031dd58

CWE

CWE-434

References

https://palantir.safebase.us/?tcuUid=92dd599a-07e2-43a8-956a-9c9566794be0

ADP enrichment

CVE

No English description supplied.

https://palantir.safebase.us/?tcuUid=92dd599a-07e2-43a8-956a-9c9566794be0

CISA-ADP

No English description supplied.

No references supplied.