← Database

CVE-2022-43685

HIGH CVSS: 8.8 Published: 2022-11-22 Modified: 2026-06-17

Description

CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request. This allows a user to take over an existing account including superuser accounts.

Affected Platforms

Okfn Ckan

Weakness Type

NVD-CWE-noinfo, CWE-862

References