Skip to content
Palantir Gotham vulnerabilities
-
palantir com.palantir.acme:dossier-app, com.palantir.acme:gotham-default-apps-bundle, com.palantir.acme:stencil-app-bundle +2 more
Under certain configurations, file artifacts uploaded to the Dossier and Slides apps did not inherit security markings of their parent artifact. This lack of security markings could lead to unintended…
CVE-2025-62487
3.5 Low
-
palantir com.palantir.gotham:glutton
Glutton V1 endpoints missing authentication
CVE-2024-49587
9.1 Critical
-
palantir com.palantir.gotham:external-artifacts
Access control issue impacting RV backed objects
CVE-2024-49581
6.5 Medium
-
palantir com.palantir.gotham:blackbird-witchcraft, gotham blackbird-witchcraft, gotham static-assets-servlet +2 more
Gotham table and Forward App Path traversal
CVE-2023-30970
6.5 Medium
-
palantir com.palantir.acme:gotham-fe-bundle, com.palantir.acme:titanium-browser-app-bundle, gotham-fe-bundle +1 more +3 more
Palantir Gotham UI bug that could lead to incorrect data classification
CVE-2023-30961
6.5 Medium
-
palantir gotham cerberus, com.palantir.acme.cerberus:cerberus +1 more
Stored XSS in cerberus attachments
CVE-2023-30962
6.8 Medium
-
palantir clips2, video clip distributor, com.palantir.gotham:clips2 +3 more +5 more
CVE-2023-30945
CVE-2023-30945
9.8 Critical
-
palantir gotham chat irc, gotham chat irc helper +1 more
Gotham Chat IRC help does not validate hostnames in TLS certificates
CVE-2022-48306
5.7 Medium
-
palantir gotham
Palantir Gotham included an endpoint that would log arbitrary sized zip files.
CVE-2022-27897
5.3 Medium
-
palantir gotham
Palantir Gotham included an endpoint that would log arbitrary sized payloads.
CVE-2022-27892
5.3 Medium
-
palantir gotham
Palantir Gotham included an unauthenticated endpoint that listed all active usernames in the platform with an active session.
CVE-2022-27891
5.3 Medium