| |
Vulnerability CVE-2022-43685
Published: 2022-11-22
| Description: |
CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request. This allows a user to take over an existing account including superuser accounts. |
References: |
https://ckan.org/
https://ckan.org/blog/get-latest-patch-releases-your-ckan-site-october-2022
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
