add : CVE-2022-24706

This commit is contained in:
gaopeng2 2022-05-20 12:22:32 +08:00
parent cce0d2a201
commit 0816c43078
2 changed files with 10 additions and 0 deletions

Binary file not shown.

After

Width:  |  Height:  |  Size: 663 KiB

View File

@ -0,0 +1,10 @@
# Apache CouchDB Unauthenticated Remote Code Execution Vulnerability (CVE-2022-24706)
Apache CouchDB is a document-oriented database system developed by the Apache Foundation using Erlang.An access control error vulnerability existed prior to Apache CouchDB 3.2.2 that stemmed from the ability of an attacker to access an incorrect default installation and gain administrator privileges without authenticating.
FOFA **query rule**: [banner="name couchdb at"](https://fofa.info/result?qbase64=YmFubmVyPSJuYW1lIGNvdWNoZGIgYXQi)
# Demo
![Apache_CouchDB_Unauthenticated_Remote_Code_Execution_Vulnerability](Apache_CouchDB_Unauthenticated_Remote_Code_Execution_Vulnerability.gif)