Security Advisory
CVE-2022-43568
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a View allows for a Reflected Cross Site Scripting via JavaScript Object Notation (JSON) in a query parameter when output_mode=radio.