VDB
CISA-2023-22934
CISA-2023-22934
PUBLISHED
CVSS 7.3 HIGH
Reported by Splunk · Published February 14, 2023
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘pivot’ search processing language (SPL) command lets a search bypass SPL safeguards for risky commands using a saved search job. The vulnerability requires an authenticated user to craft the saved job and a higher privileged user to initiate a request within their browser.
Risk Scores
CVSS 3.1
7.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Splunk | Splunk Enterprise | 8.1, 8.2, 9.0 |
| Splunk | Splunk Cloud Platform | - |
| splunk | splunk | 8.1, 8.2, 9.0 |
| splunk | splunk_cloud_platform | -, - |
| Splunk | Splunk Enterprise | 8.1, 9.0, 8.2 |
| Splunk | Splunk Cloud Platform | *, - |
Timeline
- Feb 14, 2023 CVE Published
- Feb 28, 2025 CVE Updated