CyberSecBulletin

Okfn vulnerabilities

We track 2 vulnerabilities in Okfn products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 30, 2023.

2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score

Latest Okfn vulnerabilities

  • 8.8 High severity

    ckan-docker-base: Improper Privilege Management

    CVE-2023-32696Ckan

    CKAN is an open-source data management system for powering data hubs and data portals. Prior to versions 2.9.9 and 2.10.1, the `ckan` user (equivalent to www-data) owned code and configuration files in the docker container and the `ckan` user had the permissio

  • 8.8 High severity

    Ckan: Missing Authorization

    CVE-2022-43685Okfn

    CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request. This allows a user to take over an existing account including superuser accounts.