Description
One of Gotham Gaia services was found to be vulnerable to a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker to bypass CSP and get a persistent cross site scripting payload on the stack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palantir | com.palantir.acme.gaia:gaia | — | — |