Headline
GHSA-2rqw-cfhc-35fh: CKAN may leak Solr credentials via error message in package_search action
If there were connection issues with the Solr server, the internal Solr URL (potentially including credentials) could be leaked to package_search calls as part of the returned error message
Patches
This has been patched in CKAN 2.10.5 and 2.11.0
CKAN may leak Solr credentials via error message in package_search action
Moderate severity GitHub Reviewed Published Aug 21, 2024 in ckan/ckan • Updated Aug 21, 2024