1. Home
  2. CVE Database
  3. CVE-2024-41674
MEDIUM · 5.3

CVE-2024-41674

CKAN is an open-source data management system for powering data hubs and data portals. If there were connection issues with the Solr server, the internal Solr URL (potentially including credentials) c...

Vulnerability Description

CKAN is an open-source data management system for powering data hubs and data portals. If there were connection issues with the Solr server, the internal Solr URL (potentially including credentials) could be leaked to package_search calls as part of the returned error message. This has been patched in CKAN 2.10.5 and 2.11.0.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
OkfnCkan>= 2.0, < 2.10.5

Related Weaknesses (CWE)

CWE-209

References

FAQ

What is CVE-2024-41674?

CVE-2024-41674 is a vulnerability with a CVSS score of 5.3 (MEDIUM). CKAN is an open-source data management system for powering data hubs and data portals. If there were connection issues with the Solr server, the internal Solr URL (potentially including credentials) c...

How severe is CVE-2024-41674?

CVE-2024-41674 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-41674?

Check the references section above for vendor advisories and patch information. Affected products include: Okfn Ckan.