💣Exploit CVE-2024-36985 - In Splunk Enterprise versions below 9.2.2, 9.1.5,

[Mental_Outlaw]

CVE ID : CVE-2024-36985
Published : July 1, 2024, 5:15 p.m. | 3 hours, 24 minutes ago
Description : In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10, a low-privileged user that does not hold the admin or power Splunk roles could cause a Remote Code Execution through an external lookup that references the “splunk_archiver“ application.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Reply if you wish me to write a poc tools of this exploit for you.