Approved changes feed: RSS · Atom
cpe:2.3:o:palantir:gotham:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Palantir (bb329e3d-18af-5273-8fa1-03aa6516a02f) |
|---|---|
| Product | Gotham (665bea2d-d1bc-5471-88e8-7ab277ff2dd3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-27897 |
vulnerable | 2026-06-03 14:46:54.131056 |
Palantir Gotham included an endpoint that would log arbitrary sized zip files.
MEDIUM (5.3)
Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would load portions of maliciously crafted zip files to memory. An attacker could repeatedly upload a malicious zip file, which would allow them to exhaust memory resources on the dispatch server.
Published: 2023-02-16T00:00:00.000Z
Updated: 2025-03-18T15:08:30.897Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27892 |
vulnerable | 2026-06-03 14:46:54.119939 |
Palantir Gotham included an endpoint that would log arbitrary sized payloads.
MEDIUM (5.3)
Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would have allowed an attacker to exhaust the memory of the Gotham dispatch service.
Published: 2023-02-16T00:00:00.000Z
Updated: 2025-03-18T15:08:50.897Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27891 |
vulnerable | 2026-06-03 14:46:54.119569 |
Palantir Gotham included an unauthenticated endpoint that listed all active usernames in the platform with an active session.
MEDIUM (5.3)
Palantir Gotham included an unauthenticated endpoint that listed all active usernames on the stack with an active session. The affected services have been patched and automatically deployed to all Apollo-managed Gotham instances. It is highly recommended that customers upgrade all affected services to the latest version. This issue affects: Palantir Gotham versions prior to 103.30221005.0.
Published: 2023-02-16T00:00:00.000Z
Updated: 2025-03-18T15:42:29.325Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.