CVE-2023-22936CWE-918

Authenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk Enterprise

Medium · published February 14, 2023

CVSS v3.1
6.3
EPSS
0%
Percentile
30.4
In the wild
Unconfirmed
What it is

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘search_listener’ parameter in a search allows for a blind server-side request forgery (SSRF) by an authenticated user. The initiator of the request cannot see the response without the presence of an additional vulnerability within the environment.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00376 · 30.4th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2023-02-14T17:22Z
EPSS history
Timeline
  • 14 FEB 17:22Z
    Authenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk Enterprise
    cvelistv5