CVE-2022-43571

This repository contains a writeup and analysis of CVE-2022-43571, a remote code execution vulnerability in Splunk. The author describes their journey to exploit the vulnerability, which involves the Splunk PDF generation utility, but no actual exploit code is provided in the repository.

This Metasploit module exploits CVE-2022-43571, an authenticated RCE vulnerability in Splunk Enterprise. It injects arbitrary Python code into style parameters of a SimpleXML dashboard, which executes when a user triggers the PDF export function.