CVE-2024-41674

Advisory

CKAN affected versions may expose sensitive information, including internal Solr URLs and potential credentials, in error messages when connection issues occur with the Solr server. This vulnerability arises during package_search API calls, where an unsuccessful connection to Solr could result in the leaking of internal configuration details as part of the returned error message.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/ckan/ckan/security/advisories/GHSA-2rqw-cfhc-35fh
• https://github.com/ckan/ckan/commit/f6b032cd7082d784938165bbd113557639002ca7
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41674