Splunk Addressed a High-Severity Vulnerability Affecting Windows Version

Splunk addressed a high-severity flaw, CVE-2024-23678 (CVSS 7.5), in Splunk Enterprise for Windows below versions 9.0.8 and 9.1.3. The vulnerability arises from incorrect path input data sanitization, leading to unsafe deserialization of untrusted data. This flaw could allow the execution of malicious code on the system. The vulnerability doesn’t impact the Cloud Platform. The advice is to promptly apply security patches.