CVE-2025-20227

Description

In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and Splunk Cloud Platform versions below 9.3.2408.107, 9.2.2406.112, 9.2.2403.115, 9.1.2312.208 and 9.1.2308.214, a low-privileged user that does not hold the "admin" or "power" Splunk roles could bypass the external content warning modal dialog box in Dashboard Studio dashboards which could lead to an information disclosure.

Reserved 2024-10-10 | Published 2025-03-26 | Updated 2025-03-27 | Assigner cisco

Problem types

The product does not validate or incorrectly validates input that can affect the control flow or data flow of a program.

Product status

9.4 before 9.4.1
affected

9.3 before 9.3.3
affected

9.2 before 9.2.5
affected

9.1 before 9.1.8
affected

9.3.2408 before 9.3.2408.107
affected

9.2.2406 before 9.2.2406.113
affected

9.2.2403 before 9.2.2403.115
affected

9.1.2312 before 9.1.2312.208
affected

9.1.2308 before 9.1.2308.214
affected

Credits

Taihei Shimamine

References

advisory.splunk.com/advisories/SVD-2025-0306

cve.org (CVE-2025-20227)

nvd.nist.gov (CVE-2025-20227)

Download JSON