← Back to CVE List

CVE-2022-43685

Published: 2022-11-22T01:15Z
Last Modified: 2024-11-21T07:27Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request. This allows a user to take over an existing account including superuser accounts. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt