Lucene search
+L

3 matches found

osv_ghsa
osv_ghsa
•added 2024/08/21 6:26 p.m.•46 views

GHSA-2RQW-CFHC-35FH CKAN may leak Solr credentials via error message in package_search action

If there were connection issues with the Solr server, the internal Solr URL potentially including credentials could be leaked to packagesearch calls as part of the returned error message Patches This has been patched in CKAN 2.10.5 and 2.11.0...

6.9CVSS5.7AI score0.0038EPSS
SaveExploits0References4
Mend
Mend
•added 2024/08/21 2:31 p.m.•12 views

CVE-2024-41674

CKAN is an open-source data management system for powering data hubs and data portals. If there were connection issues with the Solr server, the internal Solr URL potentially including credentials could be leaked to packagesearch calls as part of the returned error message. This has been patched ...

6.9CVSS5.7AI score0.0038EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/21 12:00 a.m.•4 views

CVE-2024-41674: Generation of Error Message Containing Sensitive Information

CKAN is an open-source data management system for powering data hubs and data portals. If there were connection issues with the Solr server, the internal Solr URL potentially including credentials could be leaked to packagesearch calls as part of the returned error message. This has been patched ...

5.3CVSS5.7AI score0.0038EPSS
SaveExploits0References1
Rows per page
Query Builder