CVE-2024-53244

Summary

CVE-2024-53244 is a vulnerability affecting Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7, as well as Splunk Cloud Platform versions below 9.2.2406.107, 9.2.2403.109, and 9.1.2312.206. It allows a low-privileged user, who does not possess the "admin" or "power" roles, to execute risky commands using the permissions of a higher-privileged user by manipulating the "s" parameter on the "/en-US/app/search/report" endpoint. The exploitation of this vulnerability necessitates a phishing attack, in which the victim is tricked into initiating the malicious request within their browser. The authenticated user cannot exploit it arbitrarily.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.