CVE-2022-27892 — Palantir Gotham included an endpoint that would log arbitrary sized payloads.

CVE-2022-27892

Palantir Gotham included an endpoint that would log arbitrary sized payloads. PUBLISHED

Description (CNA)

Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would have allowed an attacker to exhaust the memory of the Gotham dispatch service.

Affected (CNA)

Vendor / product	Versions
Palantir / Gotham	affected unspecified before 3.22.11.2

CWE

CWE-20

References

https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-11.md

ADP enrichment

CVE

No English description supplied.

https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-11.md

CISA-ADP

No English description supplied.

No references supplied.