EIP-2026-104450

This exploit demonstrates a Server-Side Request Forgery (SSRF) vulnerability in Splunk Enterprise <= 6.4.3. It captures the Splunk REST API token via a malicious link and, if the token belongs to an admin, creates a privileged user account.