Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7g93-5vcp-frv5

Опубликовано: 06 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command overwrites existing Resource Description Format Site Summary (RSS) feeds without verifying permissions. This feature has been deprecated and disabled by default.

In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command overwrites existing Resource Description Format Site Summary (RSS) feeds without verifying permissions. This feature has been deprecated and disabled by default.

EPSS

Процентиль: 31%
0.0012
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-276
CWE-285

Связанные уязвимости

CVSS3: 4.3
nvd
почти 3 года назад

In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command overwrites existing Resource Description Format Site Summary (RSS) feeds without verifying permissions. This feature has been deprecated and disabled by default.

EPSS

Процентиль: 31%
0.0012
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-276
CWE-285