Description
Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would load portions of maliciously crafted zip files to memory. An attacker could repeatedly upload a malicious zip file, which would allow them to exhaust memory resources on the dispatch server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palantir | Gotham | unspecified – < 3.22.11.2 | 3.22.11.2 |