CVE-2024-29946

Risky command safeguards bypass in Dashboard Examples Hub

State: Published
Severity: 8.1 High
Published: Mar 27, 2024
Updated: Feb 28, 2025
Reserved: Mar 21, 2024

Description

In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the Dashboard Examples Hub lacks protections for risky SPL commands. This could let attackers bypass SPL safeguards for risky commands in the Hub. The vulnerability would require the attacker to phish the victim by tricking them into initiating a request within their browser.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N	Splunk

Weaknesses

CWE-20 The product does not validate or incorrectly validates input that can affect the control flow or data flow of a program.

Affected Products

Product	Versions
Splunk EnterpriseSplunk	9.2 to before 9.2.1Affected 9.1 to before 9.1.4Affected 9.0 to before 9.0.9Affected
Splunk Cloud PlatformSplunk	- to before 9.1.2312.104Affected - to before 9.1.2308.205Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.