Skip to content
Threat Feed
Subscribe

Product

Splunk Cloud (< 8.2.9)

1 brief RSS
high advisory

Splunk Code Injection via Custom Dashboard Leading to RCE (CVE-2022-43571)

An authenticated user can exploit CVE-2022-43571, a code injection vulnerability within Splunk Enterprise or Splunk Cloud's dashboard PDF generation component, leading to remote code execution (RCE) and potential compromise of the Splunk environment.

PoC Splunk Enterprise +4 splunk vulnerability rce code-injection application-vulnerability
1t 1c updated