CVE-2023-32714: In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web request, trigger a path traversal…

PriorityP265high8.1CVSS 3.1

AVNACLPRLUINSUCHIHAN

EPSS

42.82%

98.5th percentile

In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web request, trigger a path traversal exploit that can then be used to read and write to restricted areas of the Splunk installation directory.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
splunk	splunk	>= 8.1.0 < 8.1.14	8.1.14
splunk	splunk	>= 8.2.0 < 8.2.11	8.2.11
splunk	splunk	>= 9.0.0 < 9.0.5	9.0.5
splunk	splunk_app_for_lookup_file_editing	< 4.0.1	4.0.1
splunk	splunk_app_for_lookup_file_editing	>= 4.0 < 4.0.1	4.0.1

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.