Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing
58Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendcvss 8epss 89%
da publicação à arma12 dias
Publicada no NVD16 de nov.
metasploit+12d
probabilidade de exploração
89%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
In Splunk Enterprise versions below 9.0.7 and 9.1.2, Splunk Enterprise does not safely sanitize extensible stylesheet language transformations (XSLT) that users supply. This means that an attacker can upload malicious XSLT which can result in remote code execution on the Splunk Enterprise instance.
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H