CVE-2023-32713

CriticalCVSS 9.9/10Last modified Jun 17, 2026

Description

In Splunk App for Stream versions below 8.1.1, a low-privileged user could use a vulnerability in the streamfwd process within the Splunk App for Stream to escalate their privileges on the machine that runs the Splunk Enterprise instance, up to and including the root user.

Metrics

CVSS 3.1 9.9/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

Vendor	Product	Versions
Splunk	Splunk App for Stream	>= 8.1, < 8.1.1
splunk	splunk_app_for_stream	>= 8.1, < 8.1.1

References

https://advisory.splunk.com/advisories/SVD-2023-0607Vendor Advisory
https://advisory.splunk.com/advisories/SVD-2023-0607Vendor Advisory

Timeline

Published: Jun 1, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-327148.1In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web request, trigger a p CVE-2023-327156.1In the Splunk App for Lookup File Editing versions below 4.0.1, a user can insert potentially malicious JavaScript code into the app, which CVE-2023-327166.5In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, an attacker can exploi CVE-2023-327174.3On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform versions below 9.0.2303.100, an unauthorized use CVE-2023-32727.5Cleartext Transmission of Sensitive Information in the SICK ICR890-4 could allow a remote attacker to gather sensitive information by interc CVE-2023-327215.4A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL.CVE-2023-327227.8The zabbix/src/libs/zbxjson module is vulnerable to a buffer overflow when parsing JSON files via zbx_json_open.CVE-2023-327239.1Request to LDAP is sent before user permissions are checked.CVE-2023-327248.8Memory pointer is in a property of the Ducktape object. This leads to multiple vulnerabilities related to direct memory access and manipulat CVE-2023-327258.8The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session coo CVE-2023-327268.1The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server.CVE-2023-327277.2An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execu