Security Advisory
CVE-2023-22936
6.3
MEDIUM
Vulnerability Description
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘search_listener’ parameter in a search allows for a blind server-side request forgery (SSRF) by an authenticated user. The initiator of the request cannot see the response without the presence of an additional vulnerability within the environment.
Published Date
February 14, 2023
Official Source
NIST NVD Advisory