Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2023-22936

Authenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk Enterprise

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Splunk

Description

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘search_listener’ parameter in a search allows for a blind server-side request forgery (SSRF) by an authenticated user. The initiator of the request cannot see the response without the presence of an additional vulnerability within the environment.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Splunk Splunk Enterprise

  • 8.1 to < 8.1.13affected
  • 8.2 to < 8.2.10affected
  • 9.0 to < 9.0.4affected

Splunk Splunk Cloud Platform

  • - to < 9.0.2209.3affected

References