Skip to content
OpenAdvisories
Medium · 6.8 CVE-2023-30962 EUVD-2023-35300GHSA-7c9h-q97p-3hvv

Stored XSS in cerberus attachments

Published Sep 12, 2023 · Updated Sep 25, 2024 · Assigned by Palantir

Description

The Gotham Cerberus service was found to have a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Gotham to launch attacks against other users. This vulnerability is resolved in Cerberus 100.230704.0-27-g031dd58 .

Affected products

VendorProductAffectedFixed
Palantir com.palantir.acme.cerberus:cerberus < 100.230704.0-27-g031dd58 100.230704.0-27-g031dd58

References