CVE-2023-32711: Persistent Cross-Site Scripting (XSS) through a URL Validation Bypass within a Dashboard View
In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, a Splunk dashboard view lets a low-privileged user exploit a vulnerability in the Bootstrap web framework (CVE-2019-8331) and build a stored cross-site scripting (XSS) payload.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-32711?
The severity of CVE-2023-32711 is medium.
How does CVE-2023-32711 affect Splunk Enterprise?
CVE-2023-32711 affects Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14.
What is the vulnerability description of CVE-2023-32711?
CVE-2023-32711 is a persistent cross-site scripting (XSS) vulnerability that allows a low-privileged user to bypass URL validation and build a stored XSS payload.
How can I exploit CVE-2023-32711?
Exploiting CVE-2023-32711 requires a low-privileged user to exploit a vulnerability in the Bootstrap web framework (CVE-2019-8331) within a Splunk dashboard view.
How do I fix CVE-2023-32711?
To fix CVE-2023-32711, update Splunk Enterprise to versions 9.0.5, 8.2.11, or 8.1.14.