6.8
Medium
CVE-2023-30968 One of Gotham Gaia services was found to be vulnerable to a stored cross-site scripting (XSS) vulnerability that could…
Description
One of Gotham Gaia services was found to be vulnerable to a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker to bypass CSP and get a persistent cross site scripting payload on the stack.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| com.palantir.acme.gaia:gaia 100.240205 | earliest → < 100.240205.0-12-gf415217 | 100.240205.0-12-gf415217 |
| com.palantir.acme.gaia:gaia 100.240203 | earliest → < 100.240203.6 | 100.240203.6 |
| com.palantir.acme.gaia:gaia 100.240202 | earliest → < 100.240202.9 | 100.240202.9 |
| com.palantir.acme.gaia:gaia 100.240108 | earliest → < 100.240108.11 | 100.240108.11 |
| com.palantir.acme.gaia:gaia 100.231108 | earliest → < 100.231108.82 | 100.231108.82 |
| com.palantir.acme.gaia:gaia 100.231009 | earliest → < 100.231009.47 | 100.231009.47 |
| com.palantir.acme.gaia:gaia 100.230807 | earliest → < 100.230807.13 | 100.230807.13 |