6.8 Medium

CVE-2023-30962 The Gotham Cerberus service was found to have a stored cross-site scripting (XSS) vulnerability that could have…

Description

The Gotham Cerberus service was found to have a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Gotham to launch attacks against other users. This vulnerability is resolved in Cerberus 100.230704.0-27-g031dd58 .

Affected products and versions

Product	Affected versions	Fixed in
com.palantir.acme.cerberus:cerberus 100.230704	earliest → < 100.230704.0-27-g031dd58	100.230704.0-27-g031dd58

Do you use com.palantir.acme.cerberus:cerberus?

Track this CVE Watch com.palantir.acme.cerberus:cerberus Check my SBOMs

www.cveye.io/en/cve/CVE-2023-30962

Timeline

Published September 12, 2023
Last modified September 25, 2024

References

palantir.safebase.us palantir.safebase.us

Track this CVE