Skip to content
OpenAdvisories

Product · ckan

ckan-docker-base

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Excessive permissions for ckan user

    CKAN is an open-source data management system for powering data hubs and data portals. Prior to versions 2.9.9 and 2.10.1, the `ckan` user (equivalent to www-data) owned code and configuration files in the docker container and the `ckan` user had the permissi…