Unvalidated Redirect Vulnerability in Splunk Enterprise and Cloud Platform

CVE-2025-20382

What is CVE-2025-20382?

In various versions of Splunk Enterprise and Splunk Cloud Platform, a low-privileged user can exploit a flaw that allows them to create a views dashboard with a custom background using base64 encoded data. This can lead to an unvalidated redirect, evading the Splunk external URL warning system. The attack requires phishing tactics to convince an authenticated user to request the crafted URL, potentially directing them to a malicious site.

References