ckan vulnerabilities (PyPI)
15 vulnerabilities.
-
ckanPyPI CKAN: Unauthenticated Authorization Bypass in `datastore_search_sql` 6.7 Medium -
ckanPyPI CKAN: Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql` 8.3 High -
ckanPyPI CKAN: CSRF exemption primed by anonymous requests 6.1 Medium -
ckanPyPI CKAN: No certificate validation on STMP connection 6.6 Medium -
ckanPyPI CKAN Vulnerable to Session Cookie Fixation 6.1 Medium -
ckanPyPI CKAN stored XSS vulnerability in Markdown description fields 6.3 Medium -
ckanPyPI XSS vector in user uploaded images in group/org and user profiles in ckan 7.3 High -
ckanPyPI Potential access to sensitive URLs via CKAN extensions (SSRF) 4.5 Medium -
ckanPyPI CKAN has a Cross-site Scripting vector in the Datatables view plugin 6.8 Medium -
ckanPyPI CKAN may leak Solr credentials via error message in package_search action 5.3 Medium -
ckanPyPI Potential log injection in reset user endpoint in ckan 4.3 Medium -
ckanPyPI CKAN out of memory error when submitting the dataset form with a specially-crafted field 4.5 Medium -
ckanPyPI CKAN remote code execution and private information access via crafted resource ids 9.8 Critical -
ckanPyPI CKAN contains Improper Authentication leading to account takeover 8.8 High -
ckanPyPI CKAN - Stored Cross-Site Scripting (XSS) via SVG File Upload 5.4 Medium