CVE-2023-30970: Gotham table and Forward App Path traversal

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-01-29 · updated 2026-06-17
Weakness: CWE-36

Description

Gotham Table service and Forward App were found to be vulnerable to a Path traversal issue allowing an authenticated user to read arbitrary files on the file system.

Affected products

Palantir Gotham Blackbird-Witchcraft: from 10.1 before 104.30231001.8; from 10.2 before 104.30231002.10; from 10.3 before 104.30231003.9; from 9.8 before 104.30230908.21; from 8.7 before 104.30230807.59; from 6.4 before 104.30230604.81 — fixed in 103.30230304.433, 104.30230604.81, 104.30230807.59, 104.30230908.21, 104.30231001.8, 104.30231002.10
Palantir Gotham Static-Assets-Servlet: before 1.1.0 — fixed in 1.1.0

How to fix

Upgrade to a fixed version: Palantir Gotham Blackbird-Witchcraft 103.30230304.433, 104.30230604.81, 104.30230807.59, 104.30230908.21; Palantir Gotham Static-Assets-Servlet 1.1.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-30970 or the next vulnerability affects your stack