VYPR
← All advisories
High severity8.8NVD Advisory· Published May 30, 2023· Updated Jun 17, 2026

CVE-2023-32696

CVE-2023-32696

Description

CKAN is an open-source data management system for powering data hubs and data portals. Prior to versions 2.9.9 and 2.10.1, the ckan user (equivalent to www-data) owned code and configuration files in the docker container and the ckan user had the permissions to use sudo. These issues allowed for code execution or privilege escalation if an arbitrary file write bug was available. Versions 2.9.9, 2.9.9-dev, 2.10.1, and 2.10.1-dev contain a patch.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Ckan/Ckan3 versions
    cpe:2.3:a:okfn:ckan:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:okfn:ckan:*:*:*:*:*:*:*:*range: <2.9.9
    • cpe:2.3:a:okfn:ckan:2.10.0:*:*:*:*:*:*:*
    • (no CPE)range: <2.9.9, <2.10.1
  • ckan/ckan-docker-basev5
    Range: < 2.9.9

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.