Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Splunk App for Lookup File Editing 4.0.1 Clear all filters
TI-2023-15986 CVE-2023-32714 · GHSA-q68r-7388-9j79

Path Traversal in Splunk App for Lookup File Editing

Priority MEDIUM 64

In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web request, trigger a path traversal exploit that can then be used to read and write to restricted area…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.42824 Published 2023-06-01 Fixed in 4.0.1 CWE-35
TI-2023-15987 CVE-2023-32715 · GHSA-49f3-f85j-5g57

Self Cross-Site Scripting (XSS) on Splunk App for Lookup File Editing

Priority LOW 27

In the Splunk App for Lookup File Editing versions below 4.0.1, a user can insert potentially malicious JavaScript code into the app, which causes that code to run on the user’s machine.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00313 Published 2023-06-01 Fixed in 4.0.1 CWE-79