Lucene search
+L

5 matches found

OSV
OSV
•added 2024/08/21 6:27 p.m.•76 views

GHSA-G9PH-J5VJ-F8WM Potential access to sensitive URLs via CKAN extensions (SSRF)

Impact There are a number of CKAN plugins, including XLoader, DataPusher, Resource proxy and ckanext-archiver, that work by downloading the contents of local or remote files in order to perform some actions with their contents e.g. pushing to the DataStore, streaming contents or saving a local...

6.8CVSS5.5AI score0.00369EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/08/21 6:27 p.m.•36 views

Potential access to sensitive URLs via CKAN extensions (SSRF)

Impact There are a number of CKAN plugins, including XLoader, DataPusher, Resource proxy and ckanext-archiver, that work by downloading the contents of local or remote files in order to perform some actions with their contents e.g. pushing to the DataStore, streaming contents or saving a local...

6.5CVSS6.9AI score0.00369EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2024/08/21 2:47 p.m.•72 views

CVE-2024-43371 Potential access to sensitive URLs via CKAN extensions (SSRF)

CKAN is an open-source data management system for powering data hubs and data portals. There are a number of CKAN plugins, including XLoader, DataPusher, Resource proxy and ckanext-archiver, that work by downloading the contents of local or remote files in order to perform some actions with their...

4.5CVSS0.00369EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/21 2:47 p.m.•34 views

CVE-2024-43371 Potential access to sensitive URLs via CKAN extensions (SSRF)

CKAN is an open-source data management system for powering data hubs and data portals. There are a number of CKAN plugins, including XLoader, DataPusher, Resource proxy and ckanext-archiver, that work by downloading the contents of local or remote files in order to perform some actions with their...

4.5CVSS6.9AI score0.00369EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/21 12:00 a.m.•1 views

CVE-2024-43371: Server-Side Request Forgery (SSRF)

CKAN is an open-source data management system for powering data hubs and data portals. There are a number of CKAN plugins, including XLoader, DataPusher, Resource proxy and ckanext-archiver, that work by downloading the contents of local or remote files in order to perform some actions with their...

6.5CVSS5.8AI score0.00369EPSS
SaveExploits0References1
Rows per page
Query Builder