CVE-2022-37438

CVE-2022-37438 affects Splunk Enterprise. An authenticated user can craft a dashboard (requires access to create/share dashboards via Splunk Web) and may leak information about other Splunk users (e.g., username, email, real name) through the dashboard drilldown component. The issue is scoped to ...