Anton (therceman)

Risky command safeguards bypass via Search ID query in Analytics Workspace in Splunk Enterprise

Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise

Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise

Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise

SPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk Enterprise

SPL Command Safeguards Bypass via the ‘pivot’ SPL Command in Splunk Enterprise

Risky command safeguards bypass through Search ID query in Analytics Workspace

Persistent Cross-site Scripting (XSS) in Dashboard Elements

Maintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)

Low-privileged user could create notifications in Splunk Web Bulletin Messages