CVE-2022-32154

creationtimestamp| type| source ---|---|--- 2022-06-15 20:20:38+00:00| seen| https://t.me/cibsecurity/44550...

CVE-2022-32154

Dashboards in Splunk Enterprise versions before 9.0 might let an attacker inject risky search commands into a form token when the token is used in a query in a cross-origin request. The result bypasses SPL safeguards for risky commands. See New capabilities can limit access to some custom and...