CKAN vulnerabilities

CKAN is an open-source data management system that, prior to versions 2.10.10 and 2.11.5, had a vulnerability allowing SMTP server spoofing. This could enable MITM attacks, exposing credentials and all sent emails.

CKAN is an open-source DMS for data hubs and portals. Prior to 2.10.9 and 2.11.4, session IDs could be fixed by an attacker if the site uses server-side session storage (CKAN uses cookie-based storage by default). The attacker would need to set a cookie on the victim's browser or steal a valid session. Session identifiers are now regenerated after each login.

Prior to 2.10.9 and 2.11.4, the helpers.markdown_extract() function did not perform sufficient sanitization of input data before wrapping in an HTML literal element. This helper is used to render user-provided data on dataset, resource, organization or group pages, leading to a potential XSS vector.