CVE-2023-32715 Self Cross-Site Scripting (XSS) on Splunk App for Lookup File Editing
Attackers can execute malicious JavaScript on a victim's machine via self-XSS in the Splunk App for Lookup File Editing, requiring user interaction.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2023-32715?
CVE-2023-32715 is a medium-severity cross-site scripting vulnerability in Splunk App for Lookup File Editing, published on 1 Jun 2023. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
In the Splunk App for Lookup File Editing versions below 4.0.1, a user can insert potentially malicious JavaScript code into the app, which causes that code to run on the user’s machine. The app itself does not contain the potentially malicious JavaScript code. The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser, and requires additional user interaction to trigger. The attacker cannot exploit the vulnerability at will.
Weakness: CWE-79
Which versions are affected by CVE-2023-32715?
It affects 1 product.
Products include Splunk Splunk App for Lookup File Editing.
How do I fix CVE-2023-32715?
No fix has been published for CVE-2023-32715 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2023-32715 being exploited?
There is no known exploitation of CVE-2023-32715 in the wild and no public exploit code.
Other vulnerabilities in Splunk App for Lookup File Editing
Sources
Also known as GHSA-49f3-f85j-5g57.