CVE-2023-46213 — Cross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page
In Splunk Enterprise versions below 9.0.7 and 9.1.2, ineffective escaping in the “Show syntax Highlighted” feature can result in the execution of unauthorized code in a user’s w…
Published: 2023-11-16 · CVSS: 4.8 · CVSS 3.1
In Splunk Enterprise versions below 9.0.7 and 9.1.2, ineffective escaping in the “Show syntax Highlighted” feature can result in the execution of unauthorized code in a user’s web browser.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7