CVE-2023-30962 — Stored XSS in cerberus attachments
The Gotham Cerberus service was found to have a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Gotham to launch attacks again…
Published: 2023-09-12 · CVSS: 6.8 · CVSS 3.1
The Gotham Cerberus service was found to have a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Gotham to launch attacks against other users. This vulnerability is resolved in Cerberus 100.230704.0-27-g031dd58 .
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7