CVE-2023-32714 (published 2023-06-01T16:34:29.504Z)
In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web request, trigger a path traversal exploit that can then be used to read and write to restricted areas of the Splunk installation directory.
Affected products: Vendor: Splunk
Product: Splunk App for Lookup File Editing
Versions: 4.0