CVE-2023-30959 (published 2023-09-26T17:56:20.817Z)
In Apollo  change requests, comments added by users could contain a javascript URI link that when rendered will result in an XSS that require user interaction.
Affected products: Vendor: Palantir
Product: com.palantir.apollo:autopilot
Versions: *