6.5
Medium
CVE-2023-30970 Gotham Table service and Forward App were found to be vulnerable to a Path traversal issue allowing an authenticated…
Description
Gotham Table service and Forward App were found to be vulnerable to a Path traversal issue allowing an authenticated user to read arbitrary files on the file system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| com.palantir.gotham:blackbird-witchcraft 104.30231003 | earliest → < 104.30231003.9 | 104.30231003.9 |
| com.palantir.gotham:blackbird-witchcraft 104.30231002 | earliest → < 104.30231002.10 | 104.30231002.10 |
| com.palantir.gotham:blackbird-witchcraft 104.30231001 | earliest → < 104.30231001.8 | 104.30231001.8 |
| com.palantir.gotham:blackbird-witchcraft 104.30230908 | earliest → < 104.30230908.21 | 104.30230908.21 |
| com.palantir.gotham:blackbird-witchcraft 104.30230807 | earliest → < 104.30230807.59 | 104.30230807.59 |
| com.palantir.gotham:blackbird-witchcraft 104.30230604 | earliest → < 104.30230604.81 | 104.30230604.81 |
| com.palantir.gotham:blackbird-witchcraft 103.30230304 | earliest → < 103.30230304.433 | 103.30230304.433 |