Riskcovery

CVE-2023-22933

Persistent Cross-Site Scripting through the ‘module’ Tag in a View in Splunk Enterprise

State
Published
Severity
8.0 High
Published
Feb 14, 2023
Updated
Feb 28, 2025
Reserved
Jan 10, 2023

Read the record on cve.org

Description

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, a View allows for Cross-Site Scripting (XSS) in an extensible mark-up language (XML) View through the ‘layoutPanel’ attribute in the ‘module’ tag’.

Scores

CVSSScoreVectorSource
3.18.0 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HSplunk

Weaknesses

  • CWE-79 The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Affected Products

ProductVersions
Splunk EnterpriseSplunk
  • 8.1 to before 8.1.13Affected
  • 8.2 to before 8.2.10Affected
  • 9.0 to before 9.0.4Affected
Splunk Cloud PlatformSplunk
  • - to before 9.0.2209Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.