Lucene search

K
cvelistPalantirCVELIST:CVE-2023-30961
HistorySep 26, 2023 - 6:01 p.m.

CVE-2023-30961 Palantir Gotham UI bug that could lead to incorrect data classification

2023-09-2618:01:07
CWE-710
Palantir
www.cve.org
cve-2023-30961
palantir gotham
ui bug
incorrect data classification

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.0005 Low

EPSS

Percentile

17.1%

Palantir Gotham was found to be vulnerable to a bug where under certain circumstances, the frontend could have applied an incorrect classification to a newly created property or link.

CNA Affected

[
  {
    "vendor": "Palantir",
    "product": "com.palantir.acme:gotham-fe-bundle",
    "versions": [
      {
        "version": "*",
        "versionType": "semver",
        "lessThan": "100.30230706.22",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "100.30230702.0",
        "lessThan": "*",
        "status": "affected"
      },
      {
        "version": "*",
        "versionType": "semver",
        "lessThan": "100.30230702.24",
        "status": "affected"
      },
      {
        "version": "*",
        "versionType": "semver",
        "lessThan": "100.30230704.15",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Palantir",
    "product": "com.palantir.acme:titanium-browser-app-bundle",
    "versions": [
      {
        "version": "100.30230706.20",
        "status": "affected"
      }
    ]
  }
]

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.0005 Low

EPSS

Percentile

17.1%

Related for CVELIST:CVE-2023-30961