CVE-2023-32321

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in pypi/ckan

Identifiers

CVE-2023-32321, GHSA-446m-hmmm-hm8m

Package Slug

pypi/ckan

Vulnerability

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in ckan.

Affected Versions

All versions before 2.9.9, all versions starting from 2.10.0 before 2.10.1

Solution

Upgrade to versions 2.9.9, 2.10.1 or above.

Last Modified

2023-05-25

source