Skip to content
OpenAdvisories
Medium · 6.1 CVE-2024-35291 EUVD-2024-35263

Cross-site scripting vulnerability exists in Splunk Config Explorer versions prior to 1.7.16. If this vulnerability is exploited, an arbitr…

Published May 27, 2024 · Updated Oct 28, 2024 · Assigned by jpcert

Description

Cross-site scripting vulnerability exists in Splunk Config Explorer versions prior to 1.7.16. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product.

Affected products

VendorProductAffectedFixed
Chris Younger Splunk Config Explorer prior to 1.7.16 —

References