CVE-2023-30968 — Stored XSS in gaia

Description (CNA)

One of Gotham Gaia services was found to be vulnerable to a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker to bypass CSP and get a persistent cross site scripting payload on the stack.

Affected (CNA)

Vendor / product	Versions
Palantir / com.palantir.acme.gaia:gaia	unaffected 100.240108.11 before ; unaffected 100.240203.6 before ; unaffected 100.230807.13 before ; unaffected 100.240205.0-12-gf415217 before ; unaffected 100.231108.82 before ; unaffected 100.231009.47 before ; unaffected 100.240202.9 before *

CWE

CWE-434

References

https://palantir.safebase.us/?tcuUid=01589957-ed41-4c74-90a0-3f09f7aee1cb

ADP enrichment

CVE

No English description supplied.

https://palantir.safebase.us/?tcuUid=01589957-ed41-4c74-90a0-3f09f7aee1cb

CISA-ADP

No English description supplied.

No references supplied.