Threats Tagged 'cve-2026-76333'

Splunk heeft meerdere kwetsbaarheden verholpen in Splunk Enterprise, specifiek in versies vóór 10.4.2, 10.2.6, 10.0.9 en 9.4.14.

Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 contain a vulnerability where a user with the "power" role can store a crafted Dashboard Studio workflow action URL. When another authenticated user triggers this action, attacker-controlled JavaScript executes in their browser, potentially exposing data or enabling unauthorized actions. This vulnerability arises from insufficient validation of workflow-action URLs in Dashboard Studio and requires user interaction via phishing. The attacker cannot exploit this vulnerability at will without tricking a user with appropriate privileges.

CVE-2026-76333 is a cross-site scripting (XSS) vulnerability in Splunk Enterprise Dashboard Studio affecting versions prior to 10.4.2, 10.2.6, 10.0.9, and 9.4.14. A user with the "power" Splunk role can store a crafted URL in a workflow action that executes attacker-controlled JavaScript in the browser of another authenticated user when selected. This could expose sensitive data or allow unauthorized actions via Splunk Web. Exploitation requires phishing to trick the victim into triggering the malicious action. The vulnerability arises from insufficient validation of workflow-action URLs. The affected user role limits the attacker's ability to exploit this at will.