CVE-2022-27892: Palantir Gotham included an endpoint that would log arbitrary sized payloads.
Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would have allowed an attacker to exhaust the memory of the Gotham dispatch service.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-27892?
CVE-2022-27892 is a vulnerability in Palantir Gotham versions prior to 3.22.11.2 that includes an unauthenticated endpoint allowing an attacker to exhaust the memory of the Gotham dispatch service.
How severe is CVE-2022-27892?
CVE-2022-27892 has a severity keyword of high and a severity value of 7.5.
What software versions are affected by CVE-2022-27892?
Palantir Gotham versions prior to 3.22.11.2 are affected by CVE-2022-27892.
How can I fix CVE-2022-27892?
To fix CVE-2022-27892, update your Palantir Gotham software to version 3.22.11.2 or later.
Where can I find more information about CVE-2022-27892?
You can find more information about CVE-2022-27892 in the Palantir security bulletin at the following link: [https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-11.md](https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-11.md)