CVE-2023-30961

MEDIUM

Palantir Gotham - Info Disclosure

Title source: llm

Description

Palantir Gotham was found to be vulnerable to a bug where under certain circumstances, the frontend could have applied an incorrect classification to a newly created property or link.

References (1)

[Vendor Advisory] https://palantir.safebase.us/?tcuUid=2755c49f-2c30-459e-8bdf-f95ef3692da4

Scores

CVSS v3 6.5

EPSS 0.0041

EPSS Percentile 61.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Classification

CWE

CWE-1021 CWE-710

Status published

Affected Products (2)

palantir/gotham-fe-bundle < 100.30230704.15

palantir/titanium-browser-app-bundle < 100.30230706.20

Timeline

Published Sep 27, 2023

Tracked Since Feb 18, 2026