In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web request, trigger a path traversal exploit that can then be used to read and write to restricted areas of the Splunk installation directory.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: Splunk

Published: 2023-06-01T16:34:29.504Z

Updated: 2024-12-10T18:00:38.374Z

Reserved: 2023-05-11T20:55:59.872Z

Link: CVE-2023-32714

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-06-01T17:15:10.513

Modified: 2024-11-21T08:03:54.183

Link: CVE-2023-32714

cve-icon Redhat

No data.