CVE-2024-27097

Description

Potential log injection in reset user endpoint in CKAN

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://github.com/ckan/ckan/security/advisories/GHSA-8g38-3m6v-232j
• https://nvd.nist.gov/vuln/detail/CVE-2024-27097
• https://github.com/ckan/ckan/commit/5fa133e7e9019573066455b5d442e93c62b3fc93
• https://github.com/ckan/ckan/commit/81b56c55e5e3651d7fcf9642cd5a489a9b62212c
• https://github.com/ckan/ckan/commit/d81f411bff2da7347c343a83e17f5814475b5b64
• https://docs.ckan.org/en/2.10/changelog.html#v-2-10-4-2024-03-13
• https://github.com/ckan/ckan