Unrated severityNVD Advisory· Published Feb 14, 2023· Updated Feb 28, 2025

‘createrss’ External Search Command Overwrites Existing RSS Feeds in Splunk Enterprise

CVE-2023-22931

Description

In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command overwrites existing Resource Description Format Site Summary (RSS) feeds without verifying permissions. This feature has been deprecated and disabled by default.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Splunk/Splunk Enterprisellm-fuzzy2 versions
<8.1.13, <8.2.10+ 1 more
- (no CPE)range: <8.1.13, <8.2.10
- (no CPE)range: 8.1
Splunk/Splunk Cloud Platformcpe-rescue
Range: -

Patches

Vulnerability mechanics

References

advisory.splunk.com/advisories/SVD-2023-0201mitre
research.splunk.com/application/ee69374a-d27e-4136-adac-956a96ff60fd/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000