Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2023-32708

HTTP Response Splitting via the ‘rest’ SPL Command

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Splunk

Description

In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can trigger an HTTP response splitting vulnerability with the ‘rest’ SPL command that lets them potentially access other REST endpoints in the system arbitrarily.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Splunk Splunk Enterprise

  • 8.1 to < 8.1.14affected
  • 8.2 to < 8.2.11affected
  • 9.0 to < 9.0.5affected

Splunk Splunk Cloud Platform

  • - to < 9.0.2303.100affected

References