CVE-2023-30967
Critical
Description
Gotham Orbital-Simulator service prior to 0.692.0 was found to be vulnerable to a Path traversal issue allowing an unauthenticated user to read arbitrary files on the file system.
SeverityCritical
CVSS9.8
Exploit probability—
ProductPalantir Orbital Simulator
PublishedOct 26, 2023
First seenOct 26, 2023
Weakness typeCWE-22Path traversalCWE-287Improper authentication
How to fix
Update
- palantir orbital_simulator0.692.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| palantir orbital_simulator | v < 0.692.0 | 0.692.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.