Apps and add-ons
CVE-2023-32714: Path Traversal in Splunk App for Lookup File Editing
In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web request, trigger a path traversal exploit that can then be used to read and write to restricted areas of the Splunk installation directory.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Splunk App for Lookup File Editing 4.0 | 4.0.1 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web request, trigger a path traversal exploit that can then be used to read and write to restricted areas of the Splunk installation directory.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.