Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gw5r-2prc-4jj5

Опубликовано: 14 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the lookup table upload feature let a user upload lookup tables with unnecessary filename extensions. Lookup table file extensions may now be one of the following only: .csv, .csv.gz, .kmz, .kml, .mmdb, or .mmdb.gzl. For more information on lookup table files, see About lookups.

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the lookup table upload feature let a user upload lookup tables with unnecessary filename extensions. Lookup table file extensions may now be one of the following only: .csv, .csv.gz, .kmz, .kml, .mmdb, or .mmdb.gzl. For more information on lookup table files, see About lookups.

EPSS

Процентиль: 55%
0.00331
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-20
CWE-434

Связанные уязвимости

CVSS3: 4.3
nvd
почти 3 года назад

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the lookup table upload feature let a user upload lookup tables with unnecessary filename extensions. Lookup table file extensions may now be one of the following only: .csv, .csv.gz, .kmz, .kml, .mmdb, or .mmdb.gzl.

EPSS

Процентиль: 55%
0.00331
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-20
CWE-434