Gotham

gotham

Vendor: Palantir • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-27897 1Palantir 1Gotham Jun 17, 2026 Feb 16, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would load portions of maliciously crafted zip files to memory. An attacker could repeatedly upload a malicious zip file, which would...Show more Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would load portions of maliciously crafted zip files to memory. An attacker could repeatedly upload a malicious zip file, which would allow them to exhaust memory resources on the dispatch server.Show less
CVE-2022-27892 1Palantir 1Gotham Jun 17, 2026 Feb 16, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would have allowed an attacker to exhaust the memory of the Gotham dispatch service.
CVE-2022-27891 1Palantir 1Gotham Jun 17, 2026 Feb 16, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Palantir Gotham included an unauthenticated endpoint that listed all active usernames on the stack with an active session. The affected services have been patched and automatically deployed to all Apollo-managed Gotham i...Show more Palantir Gotham included an unauthenticated endpoint that listed all active usernames on the stack with an active session. The affected services have been patched and automatically deployed to all Apollo-managed Gotham instances. It is highly recommended that customers upgrade all affected services to the latest version. This issue affects: Palantir Gotham versions prior to 103.30221005.0.Show less