Palantir Vulnerabilities and Affected Products
Vulnerabilities associated with com.palantir.acme.gaia:gaia.
Products
Clear product- com.palantir.foundry:foundry-frontend4 vulnerabilities
- Gotham3 vulnerabilities
- com.palantir.acme.gaia:gaia2 vulnerabilities
- com.palantir.comments:comments2 vulnerabilities
- com.palantir.issues:issues2 vulnerabilities
- AtlasDB1 vulnerability
- com.palantir.acme.cerberus:cerberus1 vulnerability
- com.palantir.acme:dossier-app1 vulnerability
- com.palantir.acme:gotham-default-apps-bundle1 vulnerability
- com.palantir.acme:gotham-fe-bundle1 vulnerability
- com.palantir.acme:stencil-app-bundle1 vulnerability
- com.palantir.acme:titanium-browser-app-bundle1 vulnerability
- com.palantir.apollo:autopilot1 vulnerability
- com.palantir.aries:aries1 vulnerability
- com.palantir.artifacts:artifacts1 vulnerability
- com.palantir.campaigns:campaigns1 vulnerability
- com.palantir.codeassist2:code-assist-proxy1 vulnerability
- com.palantir.compute:compute-service1 vulnerability
- com.palantir.contour:contour-dispatch1 vulnerability
- com.palantir.controlpanel:control-panel1 vulnerability
- com.palantir.foundry.jobtracker:job-tracker1 vulnerability
- com.palantir.gotham:blackbird-witchcraft1 vulnerability
- com.palantir.gotham:clips21 vulnerability
- com.palantir.gotham:external-artifacts1 vulnerability
- com.palantir.gotham:glutton1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-30971MEDIUM | Gaia unauthenticated endpointsGotham Gaia application was found to be exposing multiple unauthenticated endpoints. | CVSS6.8v3.1 | EPSS0.203% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-30968MEDIUM | Stored XSS in gaiaOne of Gotham Gaia services was found to be vulnerable to a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker to bypass CSP and get a persistent cross site scripting payload on the stack. CWE-434Mar 12, 2024 | CVSS6.8v3.1 | EPSS0.456% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |