CVE-2022-27892

Description

Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would have allowed an attacker to exhaust the memory of the Gotham dispatch service.

Affected Platforms

Weakness Type

CWE-20, CWE-20

References

• https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-11.md
• https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-11.md