admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-05-05 10:16:59 +00:00
Code Issues Packages Projects Releases Wiki Activity
GobyVuls/Apache CouchDB/CVE-2022-24706
History

README.md

Apache CouchDB Unauthenticated Remote Code Execution Vulnerability (CVE-2022-24706)

Apache CouchDB is a document-oriented database system developed by the Apache Foundation using Erlang.An access control error vulnerability existed prior to Apache CouchDB 3.2.2 that stemmed from the ability of an attacker to access an incorrect default installation and gain administrator privileges without authenticating.

FOFA query rule: banner="name couchdb at"

Demo

Apache_CouchDB_Unauthenticated_Remote_Code_Execution_Vulnerability