cve/2023/CVE-2023-30961.md

20 lines
1.1 KiB
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2023-30961](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30961)
![](https://img.shields.io/static/v1?label=Product&message=com.palantir.acme%3Agotham-fe-bundle&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=com.palantir.acme%3Atitanium-browser-app-bundle&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20100.30230706.20%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=*%3C%20100.30230706.22%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=The%20product%20does%20not%20follow%20certain%20coding%20rules%20for%20development%2C%20which%20can%20lead%20to%20resultant%20weaknesses%20or%20increase%20the%20severity%20of%20the%20associated%20vulnerabilities.&color=brighgreen)
### Description
Palantir Gotham was found to be vulnerable to a bug where under certain circumstances, the frontend could have applied an incorrect classification to a newly created property or link.
### POC
#### Reference
- https://palantir.safebase.us/?tcuUid=2755c49f-2c30-459e-8bdf-f95ef3692da4
#### Github
No PoCs found on GitHub currently.