https://vulnerability.circl.lu/sightings/feed 2026-05-09T07:31:05.532704+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/6cfe4bd8-4fad-49e6-8f18-81b213a52385/export 2026-05-09T07:31:05.914549+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "6cfe4bd8-4fad-49e6-8f18-81b213a52385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36992", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1107", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-36992\n\ud83d\udd39 Description: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the admin or power Splunk roles could craft a malicious payload through a View that could result in execution of unauthorized JavaScript code in the browser of a user. The \u201curl\u201d parameter of the Dashboard element does not have proper input validation to reject invalid URLs, which could lead to a Persistent Cross-site Scripting (XSS) exploit.\n\ud83d\udccf Published: 2024-07-01T16:30:51.507Z\n\ud83d\udccf Modified: 2025-01-09T21:36:57.174Z\n\ud83d\udd17 References:\n1. https://advisory.splunk.com/advisories/SVD-2024-0712", "creation_timestamp": "2025-01-09T22:16:07.000000Z"} 2025-01-09T22:16:07+00:00