6.8
Moyenne
CVE-2023-30968 One of Gotham Gaia services was found to be vulnerable to a stored cross-site scripting (XSS) vulnerability that could…
Description
One of Gotham Gaia services was found to be vulnerable to a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker to bypass CSP and get a persistent cross site scripting payload on the stack.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| com.palantir.acme.gaia:gaia 100.240205 | premières → < 100.240205.0-12-gf415217 | 100.240205.0-12-gf415217 |
| com.palantir.acme.gaia:gaia 100.240203 | premières → < 100.240203.6 | 100.240203.6 |
| com.palantir.acme.gaia:gaia 100.240202 | premières → < 100.240202.9 | 100.240202.9 |
| com.palantir.acme.gaia:gaia 100.240108 | premières → < 100.240108.11 | 100.240108.11 |
| com.palantir.acme.gaia:gaia 100.231108 | premières → < 100.231108.82 | 100.231108.82 |
| com.palantir.acme.gaia:gaia 100.231009 | premières → < 100.231009.47 | 100.231009.47 |
| com.palantir.acme.gaia:gaia 100.230807 | premières → < 100.230807.13 | 100.230807.13 |