Server Side Request Forgery (SSRF)

ckan is vulnerable to Server Side Request Forgery (SSRF). The vulnerability is caused due to CKAN plugins like (XLoader, DataPusher, Resource proxy and ckanext-archiver) not validating the resource URLs while making HTTP request to access the remote resources. This can lead to a malicious (or unaware) user creating a resource with a URL pointing to a place where they should not have access to.