| |
Vulnerability CVE-2022-43570
Published: 2022-11-04 Modified: 2022-11-05
| Description: |
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can perform an extensible markup language (XML) external entity (XXE) injection via a custom View. The XXE injection causes Splunk Web to embed incorrect documents into an error. |
References: |
https://www.splunk.com/en_us/product-security/announcements/svd-2022-1110.html
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
