CVE-2025-0367

In versions 3.1.0 and lower of the Splunk Supporting Add-on for Active Directory, also known as SA-ldapsearch, a vulnerable regular expression pattern could lead to a Regular Expression Denial of Service (ReDoS) attack.

Score

CVSS 3.1 6.5 Medium

Status

Deferred - prodsec@splunk.com

Published

2025-01-30

Last modified

2025-02-12

Weaknesses

CWE-1333

Affected products

• Splunk Supporting Add-on For Active Directory (Splunk)

References

• https://advisory.splunk.com/advisories/SVD-2025-0103