CVE-2023-30959
Assigner: Palantir
Published: 2023-09-26T17:56:20.817Z
State: PUBLISHED
title: Stored XSS via javascript URI in Apollo Change Requests comment
affected: vendor: Palantir
product: com.palantir.apollo:autopilot
versions: version: *
versionType: semver
lessThan: 3.308.0
status: affected
descriptions: value: In Apollo  change requests, comments added by users could contain a javascript URI link that when rendered will result in an XSS that require user interaction.
impacts: capecId: CAPEC-63
descriptions: value: An adversary embeds malicious scripts in content that will be served to web browsers. The goal of the attack is for the target software, the client-side browser, to execute the script with the users' privilege level. An attack of this type exploits a programs' vulnerabilities that are brought on by allowing remote hosts to execute code and scripts. Web browsers, for example, have some simple security controls in place, but if a remote attacker is allowed to execute scripts (through injecting them in to user-generated content like bulletin boards) then these controls may be bypassed. Further, these attacks are very difficult for an end user to detect.
problemTypes: descriptions: cweId: CWE-84
description: The web application improperly neutralizes user-controlled input for executable script disguised with URI encodings.
type: CWE
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
baseSeverity: MEDIUM
baseScore: 4.1
format: CVSS
source: discovery: INTERNAL
defect: PLTRSEC-2023-33