Approved changes feed: RSS · Atom

cpe:2.3:a:palantir:com.palantir.acme.gaia:gaia:*:*:*:*:*:*:*:*

part: a version: gaia update: *

VendorPalantir (bb329e3d-18af-5273-8fa1-03aa6516a02f)
ProductCom.Palantir.Acme.Gaia (6104e7f1-d6b2-563c-abcd-82aa50d17b99)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-30971 not_vulnerable 2026-06-03 14:51:54.318032 Gaia unauthenticated endpoints
MEDIUM (6.8)
Gotham Gaia application was found to be exposing multiple unauthenticated endpoints.
Published: 2025-12-19T16:34:19.437Z
Updated: 2025-12-19T18:00:30.734Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30968 not_vulnerable 2026-06-03 14:51:54.309903 Stored XSS in gaia
MEDIUM (6.8)
One of Gotham Gaia services was found to be vulnerable to a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker to bypass CSP and get a persistent cross site scripting payload on the stack.
Published: 2024-03-12T19:39:24.226Z
Updated: 2024-08-21T15:33:34.678Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.