Danylo Dmytriiev (DDV_UA)

Persistent Cross-Site Scripting via a Data Model object name in Splunk Enterprise

Persistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise

Command Injection using External Lookups

Persistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise

HTTP Response Splitting via the ‘rest’ SPL Command

Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon

Remote Code Execution through Serialized Session Payload in Splunk Enterprise on Windows

Persistent Cross-Site Scripting (XSS) through a URL Validation Bypass within a Dashboard View

Authenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk Enterprise

Persistent Cross-site Scripting (XSS) in Dashboard Elements