CVE-2023-30961

Palantir Gotham was found to be vulnerable to a bug where under certain circumstances, the frontend could have applied an incorrect classification to a newly created property or link.

Scoring

Severity

MEDIUM

CVSS base score

6.5

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS probability

0.41%

CWE

CWE-710

Published

2023-09-26

Last modified

2026-03-13

Affected products

• Palantir com.palantir.acme:gotham-fe-bundle
• Palantir com.palantir.acme:gotham-fe-bundle
• Palantir com.palantir.acme:titanium-browser-app-bundle

Weakness type

• CWE-710

Related vulnerabilities

• CVE-2025-0007 — Insufficient validation within Xilinx Run Time framework could allow a local attacker to escalate...
• CVE-2021-27501 — Philips Vue PACS Improper Adherence to Coding Standards
• CVE-2021-33528 — WEIDMUELLER: WLAN devices affected by privilege escalation vulnerability
• CVE-2020-1613 — Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.
• CVE-2020-1603 — Junos OS: Improper handling of specific IPv6 packets sent by clients eventually kernel crash (vmcore) the device.

Markdown version · Browse all CVEs