CouchDB before 3.5.3 leaks other users' replication credentials
An authenticated user can read replication credentials stored for other users in the _replicator database.
48
Product
Apache CouchDB
- Mentions · 7d0
- Mentions · 30d4
- All mentions4
- First seenOct 20, 2026
- Last mentioned22d ago
Timeline
4 articles · newest firstCouchDB before 3.5.3 allows unauthenticated reads of prefixed system DBs
Missing checks in chttpd expose the full contents of prefixed _users or _replicator databases.
64
CouchDB before 3.5.3 can exhaust memory via crafted sequences
An authenticated user can trigger denial of service through unsafe binary deserialization in chttpd.
28
CouchDB replicator before 3.5.3 follows redirects without a limit
The owner of a replication source or target can force a denial of service with an infinite HTTP redirect loop.
22
Related CVEs
by mentions- Missing auth checks in Apache CouchDB prefixed system DBs
- Insufficient filtering of credentials in the _replicator database in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to read…
- Unsafe binary deserialisation in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to cause a denial of service via memory…
- A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication source or target to cause a…
Appears with
- Apachevendor · 4
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.