Vendor
ckan
16 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.8
CKAN remote code execution and private information access via crafted resource ids
CKAN is an open-source data management system for powering data hubs and data portals. Multiple vulnerabilities have been discovered in Ckan which may lead to remote code execution. An arbitrary file write in `resource_create` and `package_update` actions, us…