CVE-2024-41674

CVSS V2 None CVSS V3 None

Description

CKAN is an open-source data management system for powering data hubs and data portals. If there were connection issues with the Solr server, the internal Solr URL (potentially including credentials) could be leaked to package_search calls as part of the returned error message. This has been patched in CKAN 2.10.5 and 2.11.0.

Overview

CVE ID
CVE-2024-41674

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-08-21T14:31:26.240Z

Last Modified Date
2024-08-21T15:32:22.705Z

Weakness Enumerations

CWE	URL
CWE-209	http://cwe.mitre.org/data/definitions/209.html

References

Reference URL	Reference Tags
https://github.com/ckan/ckan/security/advisories/GHSA-2rqw-cfhc-35fh	x_refsource_CONFIRM
https://github.com/ckan/ckan/commit/f6b032cd7082d784938165bbd113557639002ca7	x_refsource_MISC

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-41674
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41674

History

Created	Old Value	New Value	Data Type	Notes
2024-08-22 13:09:41				Added to TrackCVE