← CVE Intelligence

CVE-2025-20228

Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise PUBLISHED

Description (CNA)

In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.2.2403.108, and 9.1.2312.204, a low-privileged user that does not hold the "admin" or "power" Splunk roles could change the maintenance mode state of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF).

Affected (CNA)

Vendor / productVersions
Splunk / Splunk Enterpriseaffected 9.3 before 9.3.3; affected 9.2 before 9.2.5; affected 9.1 before 9.1.8
Splunk / Splunk Cloud Platformaffected 9.2.2403 before 9.2.2403.108; affected 9.1.2312 before 9.1.2312.204

CWE

CWE-352

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.