CVE-2023-22931CWE-285

‘createrss’ External Search Command Overwrites Existing RSS Feeds in Splunk Enterprise

Medium · published February 14, 2023

CVSS v3.1
4.3
EPSS
0%
Percentile
28.9
In the wild
Unconfirmed
What it is

In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command overwrites existing Resource Description Format Site Summary (RSS) feeds without verifying permissions. This feature has been deprecated and disabled by default.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00362 · 28.9th percentile
Weakness
CWE-285 · Improper Authorization
Published
2023-02-14T17:22Z
EPSS history
Timeline
  • 14 FEB 17:22Z
    ‘createrss’ External Search Command Overwrites Existing RSS Feeds in Splunk Enterprise
    cvelistv5