Anton (therceman)

Missing Access Control of Saved Searches in the Splunk Archiver app

Denial of Service (DoS) in Search Head Cluster through Cross-Site Request Forgery (CSRF) in Splunk Enterprise

Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command

Risky command safeguards bypass via Search ID query in Analytics Workspace in Splunk Enterprise

Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise

Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise

Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise

SPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk Enterprise

SPL Command Safeguards Bypass via the ‘pivot’ SPL Command in Splunk Enterprise

Risky command safeguards bypass through Search ID query in Analytics Workspace