CVE-2023-40597

No fix known EPSS <1%CVSS 7.8

In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can exploit an absolute path traversal to execute arbitrary code that is located on a separate disk.

Published 2023-08-30 · CVE record · OSV

Products: Splunk Enterprise, Splunk Cloud