← Database

CVE-2023-22931

MEDIUM CVSS: 4.3 Published: 2023-02-14 Modified: 2026-06-17

Description

In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command overwrites existing Resource Description Format Site Summary (RSS) feeds without verifying permissions. This feature has been deprecated and disabled by default.

Affected Platforms

Splunk Splunk Cloud PlatformSplunk Splunk

Weakness Type

CWE-285, CWE-276

References