CVE-2023-32714

high · 8.1

In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web request, trigger a path traversal exploit that can then be used to read and write to restricted areas of the Splunk installation directory.

8.1

CVSS

42.8%

EPSS (exploit prob.)

99th

EPSS percentile

2023-06-01

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weaknesses

CWE-35CWE-22

Affected products

Vendor	Product	Affected versions
splunk	splunk	>= 8.1.0, < 8.1.14
splunk	splunk	>= 8.2.0, < 8.2.11
splunk	splunk	>= 9.0.0, < 9.0.5
splunk	splunk_app_for_lookup_file_editing	< 4.0.1

Check a specific version with /api/v1/cve/match.

References

https://advisory.splunk.com/advisories/SVD-2023-0608
https://research.splunk.com/application/8ed58987-738d-4917-9e44-b8ef6ab948a6/
https://advisory.splunk.com/advisories/SVD-2023-0608
https://research.splunk.com/application/8ed58987-738d-4917-9e44-b8ef6ab948a6/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-32714