Splunk: CVE-2023-40597: Absolute Path Traversal in Splunk Enterprise Using runshellscript.py

In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can exploit an absolute path traversal to execute arbitrary code that is located on a separate disk.The runshellscript.py script does not perform adequate user validation. This lets an attacker use the runshellscript.py script to run a script in the root directory of another disk on the machine.The exploit requires the attacker to have write access to the drive on which they place the exploit script.This vulnerability only affects Splunk Enterprise Instances that run on Windows.