CVE-2025-20227 — Information Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio

Description (CNA)

In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and Splunk Cloud Platform versions below 9.3.2408.107, 9.2.2406.112, 9.2.2403.115, 9.1.2312.208 and 9.1.2308.214, a low-privileged user that does not hold the "admin" or "power" Splunk roles could bypass the external content warning modal dialog box in Dashboard Studio dashboards which could lead to an information disclosure.

Affected (CNA)

Vendor / product	Versions
Splunk / Splunk Enterprise	affected 9.4 before 9.4.1; affected 9.3 before 9.3.3; affected 9.2 before 9.2.5; affected 9.1 before 9.1.8
Splunk / Splunk Cloud Platform	affected 9.3.2408 before 9.3.2408.107; affected 9.2.2406 before 9.2.2406.113; affected 9.2.2403 before 9.2.2403.115; affected 9.1.2312 before 9.1.2312.208; affected 9.1.2308 before 9.1.2308.214

CWE

CWE-20

References

https://advisory.splunk.com/advisories/SVD-2025-0306

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.