CVSS 3.1
4.3 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NCVE-2023-22931
Medium (4.3) in splunk. EPSS 0.4% chance of exploitation in the next 30 days.
In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command overwrites existing Resource Description Format Site Summary (RSS) feeds without verifying permissions. This feature has been deprecated and disabled by default.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-276, CWE-285
- Published
- Modified
- Record from
- the NVD, synced
Affected
- splunk:splunk
- splunk:splunk_cloud_platform