CVE-2023-30971
Unknown
Unknown - Not Provided
Unauthenticated Endpoint Exposure in Gotham Gaia Application
Publication date: 2025-12-19
Last updated on: 2025-12-19
Assigner: Palantir Technologies
Description
Description
Gotham Gaia application was found to be exposing multiple unauthenticated endpoints.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| palantir | gotham_gaia | * |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-592 | This weakness has been deprecated because it covered redundant concepts already described in CWE-287. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The Gotham Gaia application has multiple endpoints that are exposed without requiring authentication, meaning unauthorized users can access these endpoints.
How can this vulnerability impact me? :
This vulnerability can lead to unauthorized access to sensitive information or functionality within the Gotham Gaia application, potentially resulting in data exposure or manipulation.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70