CVE-2023-30959

Medium

In Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result in an XSS that…

Palantir·CWE-84·Published 2023-09-26

CVSS

5.4

EPSS

0.00

KEV

Exploits

cve.orgen

159 chars

In Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result in an XSS that require user interaction.

NVDen

159 chars

In Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result in an XSS that require user interaction.

En las solicitudes de cambio de Apollo, los comentarios agregados por los usuarios pueden contener un enlace URI de JavaScript que, cuando se procesa, dará como resultado un XSS que requiere la interacción del usuario.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	5.4	2.3	2.7	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
3.1	Primary	cve.org	4.1	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
3.1	Primary	cve.org	4.1	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
3.1	Secondary	NVD	4.1	2.3	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N