Vulnerability CVE-2022-27897


Published: 2023-02-16

Description:
Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would load portions of maliciously crafted zip files to memory. An attacker could repeatedly upload a malicious zip file, which would allow them to exhaust memory resources on the dispatch server.

 References:
https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-12.md

Copyright 2026, cxsecurity.com

 

Back to Top