Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-43568

Reflected Cross-Site Scripting via the radio template in Splunk Enterprise

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Splunk

Description

In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a View allows for a Reflected Cross Site Scripting via JavaScript Object Notation (JSON) in a query parameter when output_mode=radio.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Splunk Splunk Enterprise

Default version status: affected

  • 8.1 to < 8.1.12affected
  • 8.2 to < 8.2.9affected
  • 9.0 to < 9.0.2affected

References