CVE-2023-22931

—

CVSS 3.1

4.3 medium

EPSS

<1%p30

Published

Feb 14, 2023 (Feb 14, 2023)

Modified

Jun 17, 2026

Description

In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command overwrites existing Resource Description Format Site Summary (RSS) feeds without verifying permissions. This feature has been deprecated and disabled by default.

Vendors: splunk
Products: splunk, splunk cloud platform
Weakness: CWE-285, CWE-276
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.