CVE-2023-30962

MEDIUM

Stored XSS in cerberus attachments

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-30962 has a selected CVSS score of 6.8 (medium).

Description

The Gotham Cerberus service was found to have a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Gotham to launch attacks against other users. This vulnerability is resolved in Cerberus 100.230704.0-27-g031dd58 .

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 25, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

com.palantir.acme.cerberus:cerberus

Browse Palantir / com.palantir.acme.cerberus:cerberus
CVE List* to < 100.230704.0-27-g031dd58affected

References

2