CO
Product
CouchDB
On CISA KEVExploited in the wild
20
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 2Low 0
Watch
Add CouchDB to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-45725 | 5.7 | Dec 13 | Design document functions which receive a user http request object may expose authorization or session cookie headers of the user who accesses the document Affected: through 3.3.2 |
| CVE-2023-26268 | 5.3 | May 2 | Design documents with matching document IDs, from databases on the same cluster, may share a mutable Javascript environment when using these design document functions: * … Affected: before 3.2.3; 3.3.0 before 3.3.2 |
Showing 2
