VULNERABILITY INTELLIGENCE

CVE-2023-22931

CVSS score4.3 MEDIUM
EPSS probability0.36%
CISA KEVNot currently listed
Published2023-02-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Description

In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command overwrites existing Resource Description Format Site Summary (RSS) feeds without verifying permissions. This feature has been deprecated and disabled by default.

Weakness classification

  • prodsec@splunk.com: CWE-285
  • nvd@nist.gov: CWE-276

Primary references