CVE-2025-20233lowCWE-732

CVE-2025-20233: falha de baixa gravidade em Splunk App for Lookup File Editing

Incorrect permissions set by the “chmod“ and “makedirs“ Python functions in Splunk App for Lookup File Editing

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Splunk App for Lookup File Editing

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 2.5epss 0.1%
In the Splunk App for Lookup File Editing versions below 4.0.5, a script in the app used the `chmod` and `makedirs` Python functions in a way that resulted in overly broad read and execute permissions. This could lead to improper access control for a low-privileged user.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Splunk · Splunk App for Lookup File Editing
CVEs relacionadas — Splunk App for Lookup File Editing

No mesmo produto, das mais perigosas para as menos.

CVE-2023-32714HIGHPath Traversal in Splunk App for Lookup File EditingEPSS 42.8%CVE-2023-32715MEDIUMSelf Cross-Site Scripting (XSS) on Splunk App for Lookup File EditingEPSS 0.3%