CVE-2022-43685
22.11.2022, 01:15
CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request. This allows a user to take over an existing account including superuser accounts.Enginsight
| Vendor | Product | Version |
|---|---|---|
| okfn | ckan | 𝑥 < 2.8.12 |
| okfn | ckan | 2.9.0 ≤ 𝑥 < 2.9.7 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration