CVE-2024-53247

creationtimestamp| type| source ---|---|--- 2024-12-10 18:17:21+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113629897738815588 2024-12-10 19:59:10+00:00| seen| https://t.me/cvedetector/12530 2024-12-12 08:17:54+00:00| seen| https://t.me/CyberBulletin/26765 2024-12-12...

CVE-2024-53247 Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app

In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7, and versions below 3.4.261 and 3.7.13 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could perform a Remote Code Execution RCE...

CVE-2024-53247

CVE-2024-53247 affects Splunk Enterprise and the Splunk Secure Gateway app on Splunk Cloud Platform. It enables a low-privileged user (not admin/power) to achieve Remote Code Execution via deserialization issues, with root cause tied to jsonpickle handling in the affected components. Affected ver...