CVE-2026-90798lowCWE-834

CVE-2026-90798: falha de baixa gravidade em Apache CouchDB

Apache CouchDB: Replicator follows redirects indefinitely

Publicada em

Seguir esta CVE+ Monitorar Apache CouchDB

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 0.6epss 0.6%
A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication source or target to cause a denial of service via creating an infinite HTTP redirect loop. Users are recommended to upgrade to version 3.5.3, which fixes this issue.
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:U/S:N/AU:Y/R:U/V:D/RE:M/U:Amber
Produtos afetados
Apache Software Foundation · Apache CouchDB
CVEs relacionadas — Apache CouchDB

No mesmo produto, das mais perigosas para as menos.

CVE-2022-24706CRITICALRemote Code Execution Vulnerability in PackagingEPSS 92.5%KEVCVE-2017-12635—CVE-2017-12635EPSS 99.8%CVE-2017-12636—CVE-2017-12636EPSS 90.6%CVE-2018-8007—CVE-2018-8007EPSS 12.2%CVE-2018-11769—CVE-2018-11769EPSS 8.4%CVE-2018-17188—CVE-2018-17188EPSS 3.6%