mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
pyth0n1c
1.7 KiB
1.7 KiB
| 1 | splunk_risky_command | description | vulnerable_versions | CVE | other_metadata | |
|---|---|---|---|---|---|---|
| 2 | *createrss* | createrss command overwrites existing RSS feeds without verifying permissions | 8.1.13 8.2.10 | CVE-2023-22931 | ||
| 3 | *pivot?seedSid=* | pivot command allows a search to bypass SPL safeguards for risky commands using a saved job | 8.1.13 | 8.2.10 | 9.0.4 | CVE-2023-22934 |
| 4 | *|makeresults+&search_listener* | search_listener parameter in a Search allows for a Blind Server Side Request Forgery by an authenticated user | 8.1.13 8.2.10 9.0.4 | CVE-2023-22936 | ||
| 5 | *| map search=*| * | map search processing language (SPL) command lets a search bypass SPL safeguards for risky commands | 8.1.13 8.2.10 9.0.4 | CVE-2023-22939 | ||
| 6 | *| sendalert * | display.page.search.patterns.sensitivity search parameter allows a search to bypass SPL safeguards for risky commands using obfuscation | 8.1.13 8.2.10 9.0.4 | CVE-2023-22935 |