medium4.1
CVE-2023-30959
In Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result in an XSS that require user interaction.
Impact
In Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result in an XSS that require user interaction.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Palantir | Apollo Autopilot | before 3.308.0 |