CVE-2022-43568

Reflected Cross-Site Scripting via the radio template in Splunk Enterprise

CVSS 8.8 HIGHEPSS 42.8%CWE-79

In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a View allows for a Reflected Cross Site Scripting via JavaScript Object Notation (JSON) in a query parameter when output_mode=radio.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Produtos afetados

Splunk · Splunk Enterprise

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://research.splunk.com/application/d532d105-c63f-4049-a8c4-e249127ca425/https://www.splunk.com/en_us/product-security/announcements/svd-2022-1108.html