CVE-2024-41675
CVSS V2 None
CVSS V3 None
Description
CKAN is an open-source data management system for powering data hubs and data portals. The Datatables view plugin did not properly escape record data coming from the DataStore, leading to a potential XSS vector. Sites running CKAN >= 2.7.0 with the datatables_view plugin activated. This is a plugin included in CKAN core, that not activated by default but it is widely used to preview tabular data. This vulnerability has been fixed in CKAN 2.10.5 and 2.11.0.
Overview
- CVE ID
- CVE-2024-41675
- Assigner
- GitHub_M
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-08-21T14:34:31.424Z
- Last Modified Date
- 2024-08-21T14:34:31.424Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://github.com/ckan/ckan/security/advisories/GHSA-r3jc-vhf4-6v32 | x_refsource_CONFIRM |
| https://github.com/ckan/ckan/commit/9e89ce8220ab1445e0bd85a67994a51d9d3d2688 | x_refsource_MISC |
| https://github.com/ckan/ckan/commit/d7dfe8c427b1c63c75d788a609f3b7d7620a25a1 | x_refsource_MISC |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-41675 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41675 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-08-22 13:09:41 | Added to TrackCVE |