{"action":"Upgrade ckan to 2.9.7 or later.","affected":[{"fixed":"2.9.7","introduced":"0"}],"component":"ckan","cve_ids":["CVE-2022-43685"],"ecosystem":"PyPI","epss":0.00745,"exploited":false,"fixed_versions":["2.9.7"],"ghsa_id":"GHSA-m2xp-jxfg-qq6g","id":"tcs_01M5KFPZR3EE6EWZ8BWHCJT4VA","modified_at":"2025-04-29T13:22:17.099447Z","published_at":"2022-11-22T03:30:56Z","references":["https://osv.dev/vulnerability/GHSA-m2xp-jxfg-qq6g","https://nvd.nist.gov/vuln/detail/CVE-2022-43685","https://ckan.org","https://ckan.org/blog/get-latest-patch-releases-your-ckan-site-october-2022","https://github.com/ckan/ckan","https://github.com/pypa/advisory-database/tree/main/vulns/ckan/PYSEC-2022-42987.yaml"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-m2xp-jxfg-qq6g","url":"https://osv.dev/vulnerability/GHSA-m2xp-jxfg-qq6g"}],"summary":"CKAN contains Improper Authentication leading to account takeover"}