Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-30970 EUVD-2023-35308GHSA-h994-99h2-49qc

Gotham table and Forward App Path traversal

Published Jan 29, 2024 · Updated May 29, 2025 · Assigned by Palantir

Description

Gotham Table service and Forward App were found to be vulnerable to a Path traversal issue allowing an authenticated user to read arbitrary files on the file system.

Affected products

VendorProductAffectedFixed
Palantir com.palantir.gotham:blackbird-witchcraft < 104.30231002.10, < 104.30231001.8, < 104.30230807.59, < 104.30230908.21, < 103.30230304.433, < 104.30230604.81, < 104.30231003.9 104.30231002.10

References