CVE-2022-43685

HIGH · CVSS 8.8 EPSS 0.68%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-11-22 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-43685

Severity

HIGH

CVSS

8.8

EPSS

0.68%

Original NVD Description

CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request. This allows a user to take over an existing account including superuser accounts.