4.1
Medium
CVE-2023-30959 In Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result…
Description
In Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result in an XSS that require user interaction.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| com.palantir.apollo:autopilot 3.308 | earliest → < 3.308.0 | 3.308.0 |