CVE-2023-40597 (published 2023-08-30T16:19:44.220Z)
In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can exploit an absolute path traversal to execute arbitrary code that is located on a separate disk.
Affected products: Vendor: Splunk
Product: Splunk Enterprise
Versions: 8.2, 9.0, 9.1