CVE-2023-30968

One of Gotham Gaia services was found to be vulnerable to a stored cross-site scripting XSS vulnerability that could have allowed an attacker to bypass CSP and get a persistent cross site scripting payload on the stack...

CVE-2023-30954

The Gotham video-application-server service contained a race condition which would cause it to not apply certain acls new videos if the source system had not yet initialized...

CVE-2023-30961

Palantir Gotham was found to be vulnerable to a bug where under certain circumstances, the frontend could have applied an incorrect classification to a newly created property or link...

CVE-2023-30962

The Gotham Cerberus service was found to have a stored cross-site scripting XSS vulnerability that could have allowed an attacker with access to Gotham to launch attacks against other users. This vulnerability is resolved in Cerberus 100.230704.0-27-g031dd58...

CVE-2023-30968

One of Gotham Gaia services was found to be vulnerable to a stored cross-site scripting XSS vulnerability that could have allowed an attacker to bypass CSP and get a persistent cross site scripting payload on the stack...

Cross site scripting

One of Gotham Gaia services was found to be vulnerable to a stored cross-site scripting XSS vulnerability that could have allowed an attacker to bypass CSP and get a persistent cross site scripting payload on the stack...

CVE-2023-30968 Stored XSS in gaia

One of Gotham Gaia services was found to be vulnerable to a stored cross-site scripting XSS vulnerability that could have allowed an attacker to bypass CSP and get a persistent cross site scripting payload on the stack...

CVE-2023-30968 Stored XSS in gaia

One of Gotham Gaia services was found to be vulnerable to a stored cross-site scripting XSS vulnerability that could have allowed an attacker to bypass CSP and get a persistent cross site scripting payload on the stack...

CVE-2023-30968

CVE-2023-30968 corresponds to a stored cross-site scripting (XSS) issue in Gotham Gaia services (Palantir Gotham Gaia). The vulnerability allows an attacker to bypass Content Security Policy (CSP) and inject a persistent XSS payload on the stack. Documents consistently describe it as a stored XSS...

PT-2024-12247 · Unknown · Gotham Gaia

Name of the Vulnerable Software and Affected Versions: Gotham Gaia affected versions not specified Description: A stored cross-site scripting XSS issue was discovered, allowing an attacker to bypass Content Security Policy CSP and achieve a persistent cross-site scripting payload. Recommendations...

Palantir Gotham Code Issue Vulnerability

Palantir Gotham is a commercially available, artificial intelligence-enabled operating system from US-based Palantir. Palantir Gotham has a code issue vulnerability that stems from the presence of a vulnerability that can bypass the Content Security Policy CSP and can lead to cross-site scripting...

CVE-2023-30970

Gotham Table service and Forward App were found to be vulnerable to a Path traversal issue allowing an authenticated user to read arbitrary files on the file system...

CVE-2023-30970

Gotham Table service and Forward App were found to be vulnerable to a Path traversal issue allowing an authenticated user to read arbitrary files on the file system...

Path traversal

Gotham Table service and Forward App were found to be vulnerable to a Path traversal issue allowing an authenticated user to read arbitrary files on the file system...

CVE-2023-30970 Gotham table and Forward App Path traversal

Gotham Table service and Forward App were found to be vulnerable to a Path traversal issue allowing an authenticated user to read arbitrary files on the file system...

CVE-2023-30970

CVE-2023-30970 affects Gotham Table service and Forward App. The issue is a Path traversal vulnerability that allows an authenticated user to read arbitrary files on the file system. Affected component is the file-path handling within Gotham Table/Forward App (no specific version or patch details...

CVE-2023-30970 Gotham table and Forward App Path traversal

Gotham Table service and Forward App were found to be vulnerable to a Path traversal issue allowing an authenticated user to read arbitrary files on the file system...

Palantir Gotham Path Traversal Vulnerability

Palantir Gotham is a commercially available, artificial intelligence-enabled operating system from US-based Palantir. A security vulnerability exists in Palantir Gotham blackbird-witchcraft. An attacker exploiting this vulnerability could read arbitrary files on the file system...

CVE-2023-30954

The Gotham video-application-server service contained a race condition which would cause it to not apply certain acls new videos if the source system had not yet initialized...

CVE-2023-30954

The Gotham video-application-server service contained a race condition which would cause it to not apply certain acls new videos if the source system had not yet initialized...