Lucene search
+L

1 matches found

OSV
OSV
added 2024/08/21 6:26 p.m.17 views

GHSA-2RQW-CFHC-35FH CKAN may leak Solr credentials via error message in package_search action

If there were connection issues with the Solr server, the internal Solr URL potentially including credentials could be leaked to packagesearch calls as part of the returned error message Patches This has been patched in CKAN 2.10.5 and 2.11.0...

6.9CVSS5.2AI score0.00377EPSS
SaveExploits0References4
Rows per page
Query Builder