Unauthenticated Redirect Vulnerability in Splunk Enterprise and Cloud Platform

CVE-2025-20378

What is CVE-2025-20378?

In specific versions of Splunk Enterprise and Splunk Cloud Platform, an unauthenticated attacker could exploit a flaw in the return_to parameter of the login endpoint. By crafting a malicious URL, the attacker could lead authenticated users to an unvalidated redirect to a potentially harmful external site. Exploitation relies on tricking users into clicking the malicious link, requiring social engineering rather than direct attack methods.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References