PT-2022-21123

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 9.0 Description The issue allows an attacker to inject risky search commands into a form token when the token is used in a query in a cross-origin request, bypassing SPL safeguards for risky commands. This i...