CVE-2023-4571

In Splunk IT Service Intelligence (ITSI) versions below below 4.13.3, 4.15.3, or 4.17.1, a malicious actor can inject American National Standards Institute (ANSI) escape codes into Splunk ITSI log files that, when a vulnerable terminal application reads them, can run malicious code in the vulnerable application. This attack requires a user to use a terminal application that translates ANSI escape codes to read the malicious log file locally in the vulnerable terminal. The vulnerability also requires additional user interaction to succeed. The vulnerability does not directly affect Splunk ITSI. The indirect impact on Splunk ITSI can vary significantly depending on the permissions in the vulnerable terminal application, as well as where and how the user reads the malicious log file. For example, users can copy the malicious file from Splunk ITSI and read it on their local machine.

• CWE-117
• CWE-116

• https://advisory.splunk.com/advisories/SVD-2023-0810Vendor Advisory
• https://advisory.splunk.com/advisories/SVD-2023-0810Vendor Advisory

Published

Aug 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-45701HCL Launch could allow a remote attacker to obtain sensitive…6.5
• CVE-2023-45702An HCL UrbanCode Deploy Agent installed as a Windows service…5.5
• CVE-2023-45703HCL Launch may mishandle input validation of an uploaded arc…7.5
• CVE-2023-45705An administrative user of WebReports may perform a Server Si…7.2
• CVE-2023-45706An administrative user of WebReports may perform a Cross Sit…4
• CVE-2023-45707HCL Connections Docs is vulnerable to a cross-site scripting…4.4
• CVE-2023-45715The console may experience a service interruption when proce…4.3
• CVE-2023-45716Sametime is impacted by sensitive information passed in URL.…4.1
• CVE-2023-45718Sametime is impacted by a failure to invalidate sessions. T…7.5
• CVE-2023-4572Use after free in MediaStream in Google Chrome prior to 116.…8.8
• CVE-2023-45720Insufficient default configuration in HCL Leap allows anonym…5.3
• CVE-2023-45721Insufficient default configuration in HCL Leap allows anonym…5.3