Skip to content
Threat Feed
Subscribe

Product

CKAN

2 briefs RSS
high advisory

Multiple Vulnerabilities in CKAN

CKAN is affected by multiple vulnerabilities that allow remote attackers to conduct cross-site scripting (XSS) attacks, bypass security controls, and disclose sensitive information.

CKAN web-application vulnerability
1t
high advisory

CKAN Unauthenticated SQL Injection in datastore_search_sql

An unauthenticated SQL injection vulnerability in CKAN's `datastore_search_sql` function allows attackers to access private resources and PostgreSQL system information, affecting versions prior to 2.10.10 and versions 2.11.0 through 2.11.4.

ckan sql-injection vulnerability
2r 1t