{"id":"CVE-2023-32708","aliases":["EUVD-2023-36935","GHSA-8v6j-9rv8-9mrh"],"status":"published","title":"HTTP Response Splitting via the ‘rest’ SPL Command","description":"In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can trigger an HTTP response splitting vulnerability with the ‘rest’ SPL command that lets them potentially access other REST endpoints in the system arbitrarily.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00749,"percentile":0.55253,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-113","CWE-436"],"published":"2023-06-01T16:34:27Z","modified":"2026-06-17T05:59:25Z","products":[{"vendor":"splunk","product":"splunk"},{"vendor":"splunk","product":"splunk cloud platform"},{"vendor":"splunk","product":"splunk enterprise"},{"vendor":"splunk","product":"splunk_cloud_platform"}],"references":[{"url":"https://advisory.splunk.com/advisories/SVD-2023-0603","tags":["x_transferred","Vendor Advisory"]},{"url":"https://research.splunk.com/application/e615a0e1-a1b2-4196-9865-8aa646e1708c/","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32708"},{"url":"https://research.splunk.com/application/e615a0e1-a1b2-4196-9865-8aa646e1708c"},{"url":"https://github.com/advisories/GHSA-8v6j-9rv8-9mrh"}],"sources":{"cve":[{"id":"CVE-2023-32708","title":"HTTP Response Splitting via the ‘rest’ SPL Command","description":"In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can trigger an HTTP response splitting vulnerability with the ‘rest’ SPL command that lets them potentially access other REST endpoints in the system arbitrarily.","status":"published","published":"2023-06-01T16:34:27.126Z","modified":"2025-02-28T11:03:58.212Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-113"],"updated_at":"2026-11-02T14:35:29.381004Z"}],"euvd":[{"id":"EUVD-2023-36935","description":"In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can trigger an HTTP response splitting vulnerability with the ‘rest’ SPL command that lets them potentially access other REST endpoints in the system arbitrarily.","status":"published","published":"2023-06-01T16:34:27Z","modified":"2025-02-28T11:03:58Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:53:19.898689Z"}],"ghsa":[{"id":"GHSA-8v6j-9rv8-9mrh","title":"In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions...","description":"In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can trigger an HTTP response splitting vulnerability with the ‘rest’ SPL command that lets them potentially access other REST endpoints in the system arbitrarily.","status":"published","published":"2023-07-06T21:15:06Z","modified":"2024-04-04T05:48:04Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-113","CWE-436"],"updated_at":"2026-11-02T14:56:36.004809Z"}],"nvd":[{"id":"CVE-2023-32708","description":"In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can trigger an HTTP response splitting vulnerability with the ‘rest’ SPL command that lets them potentially access other REST endpoints in the system arbitrarily.","status":"published","published":"2023-06-01T17:15:10.173Z","modified":"2026-06-17T05:59:25.813Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-113","CWE-436"],"updated_at":"2026-11-02T14:08:03.795015Z"}]}}