Skip to content
Threat Feed
Subscribe

Product

Splunk Cloud Platform (< 9.0.2209)

1 brief RSS
high advisory

Splunk Code Injection via Custom Dashboard Leading to RCE (CVE-2022-43571)

An authenticated user can exploit CVE-2022-43571, a code injection vulnerability within Splunk Enterprise or Splunk Cloud's dashboard PDF generation component, leading to remote code execution (RCE) and potential compromise of the Splunk environment.

PoC Splunk Enterprise +4 splunk vulnerability rce code-injection application-vulnerability
1t 1c updated