1 matches found
CKAN may leak Solr credentials via error message in package_search action
If there were connection issues with the Solr server, the internal Solr URL potentially including credentials could be leaked to packagesearch calls as part of the returned error message PatchesThis has been patched in CKAN 2.10.5 and 2.11.0...
6.9CVSS5.6AI score0.0038EPSS
SaveExploits0References6Affected Software1
20