CVE-2023-30959

CVE-2023-30959 affects Palantir Apollo: the vulnerability is a stored XSS in the Apollo change requests comments where a user-supplied javascript: URI can be rendered, triggering XSS that requires user interaction. The issue targets the change-requests comment workflow; root cause is the handling...