https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 23:37:36 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-20566 cnvd-2018-20566 https://cve.radiocsirt.org/vuln/cnvd-2018-20566 https://cve.radiocsirt.org/vuln/euvd-2026-165233 EUVD-2026-165233 https://cve.radiocsirt.org/vuln/euvd-2026-165233 https://cve.radiocsirt.org/vuln/fkie_cve-2018-8007 <p>Apache CouchDB administrative users can configure the database server via HTTP(S). Due to insufficient validation of administrator-supplied configuration settings via the HTTP API, it is possible for a CouchDB administrator user to escalate their privileges to that of the operating system&#39;s user that CouchDB runs under, by bypassing the blacklist of configuration settings that are not allowed to be modified via the HTTP API. This privilege escalation effectively allows an existing CouchDB admin user to gain arbitrary remote code execution, bypassing already disclosed CVE-2017-12636. Mitigation: All users should upgrade to CouchDB releases 1.7.2 or 2.1.2.</p> <p>Apache CouchDB administrative users can configure the database server via HTTP(S). Due to insufficient validation of administrator-supplied configuration settings via the HTTP API, it is possible for a CouchDB administrator user to escalate their privileges to that of the operating system&#39;s user that CouchDB runs under, by bypassing the blacklist of configuration settings that are not allowed to be modified via the HTTP API. This privilege escalation effectively allows an existing CouchDB admin user to gain arbitrary remote code execution, bypassing already disclosed CVE-2017-12636. Mitigation: All users should upgrade to CouchDB releases 1.7.2 or 2.1.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-8007 https://cve.radiocsirt.org/vuln/ghsa-mqj2-xj98-r5xp <p>Apache CouchDB administrative users can configure the database server via HTTP(S). Due to insufficient validation of administrator-supplied configuration settings via the HTTP API, it is possible for a CouchDB administrator user to escalate their privileges to that of the operating system&#39;s user that CouchDB runs under, by bypassing the blacklist of configuration settings that are not allowed to be modified via the HTTP API. This privilege escalation effectively allows an existing CouchDB admin user to gain arbitrary remote code execution, bypassing already disclosed CVE-2017-12636. Mitigation: All users should upgrade to CouchDB releases 1.7.2 or 2.1.2.</p> <p>Apache CouchDB administrative users can configure the database server via HTTP(S). Due to insufficient validation of administrator-supplied configuration settings via the HTTP API, it is possible for a CouchDB administrator user to escalate their privileges to that of the operating system&#39;s user that CouchDB runs under, by bypassing the blacklist of configuration settings that are not allowed to be modified via the HTTP API. This privilege escalation effectively allows an existing CouchDB admin user to gain arbitrary remote code execution, bypassing already disclosed CVE-2017-12636. Mitigation: All users should upgrade to CouchDB releases 1.7.2 or 2.1.2.</p> https://cve.radiocsirt.org/vuln/ghsa-mqj2-xj98-r5xp https://cve.radiocsirt.org/vuln/gsd-2018-8007 gsd-2018-8007 https://cve.radiocsirt.org/vuln/gsd-2018-8007 https://cve.radiocsirt.org/vuln/suse-su-2018:2578-1 <p>Security update for couchdb</p> <p>Security update for couchdb</p> https://cve.radiocsirt.org/vuln/suse-su-2018:2578-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-8007 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: couchdb</p> <p>Apache CouchDB administrative users can configure the database server via HTTP(S). Due to insufficient validation of administrator-supplied configuration settings via the HTTP API, it is possible for a CouchDB administrator user to escalate their privileges to that of the operating system&#39;s user that CouchDB runs under, by bypassing the blacklist of configuration settings that are not allowed to be modified via the HTTP API. This privilege escalation effectively allows an existing CouchDB admin user to gain arbitrary remote code execution, bypassing already disclosed CVE-2017-12636. Mitigation: All users should upgrade to CouchDB releases 1.7.2 or 2.1.2.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: couchdb</p> <p>Apache CouchDB administrative users can configure the database server via HTTP(S). Due to insufficient validation of administrator-supplied configuration settings via the HTTP API, it is possible for a CouchDB administrator user to escalate their privileges to that of the operating system&#39;s user that CouchDB runs under, by bypassing the blacklist of configuration settings that are not allowed to be modified via the HTTP API. This privilege escalation effectively allows an existing CouchDB admin user to gain arbitrary remote code execution, bypassing already disclosed CVE-2017-12636. Mitigation: All users should upgrade to CouchDB releases 1.7.2 or 2.1.2.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-8007