CouchDB before 3.5.3 allows unauthenticated reads of prefixed system DBs
Missing checks in chttpd expose the full contents of prefixed _users or _replicator databases.
1 stories, newest first · one card per story
Missing checks in chttpd expose the full contents of prefixed _users or _replicator databases.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views