CVE-2022-27892

MEDIUM

Palantir Gotham < 3.22.11.2 - Improper Input Validation

Title source: rule
STIX 2.1

Description

Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would have allowed an attacker to exhaust the memory of the Gotham dispatch service.

References (1)

Core 1

Scores

CVSS v3 5.3
EPSS 0.0039
EPSS Percentile 60.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-20
Status published
Products (1)
palantir/gotham < 3.22.11.2
Published Feb 16, 2023
Tracked Since Feb 18, 2026