CVE-2023-32708CWE-113

HTTP Response Splitting via the ‘rest’ SPL Command

High · published June 1, 2023

CVSS v3.1
7.2
EPSS
1%
Percentile
54.4
In the wild
Unconfirmed
What it is

In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can trigger an HTTP response splitting vulnerability with the ‘rest’ SPL command that lets them potentially access other REST endpoints in the system arbitrarily.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00749 · 54.4th percentile
Weakness
CWE-113 · Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')
Published
2023-06-01T16:34Z
EPSS history
Timeline
  • 01 JUN 16:34Z
    HTTP Response Splitting via the ‘rest’ SPL Command
    cvelistv5