CVE-2025-20233

3.3 lowEPSS 0.1%

Low (3.3) in splunk splunk app for lookup file editing. EPSS 0.1% chance of exploitation in the next 30 days.

In the Splunk App for Lookup File Editing versions below 4.0.5, a script in the app used the `chmod` and `makedirs` Python functions in a way that resulted in overly broad read and execute permissions. This could lead to improper access control for a low-privileged user.

Severity

CVSS 3.1

3.3 low

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2025-03-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

splunk:splunk_app_for_lookup_file_editing

References

https://advisory.splunk.com/advisories/SVD-2025-0310

Check your stack JSON