CVE-2023-32713

CVE-2023-32713 is a critical privilege escalation vulnerability affecting Splunk App for Stream versions below 8.1.1. A low-privileged user can exploit a flaw in the streamfwd process to escalate their privileges up to root on the Splunk Enterprise instance. With a CVSS score of 9.9, this vulnerability is easily exploitable over the network with low privileges and no user interaction, leading to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential future exploitation.