UpHeron
All vulnerabilities

Servers and applications

CVE-2018-8007

Apache CouchDB administrative users can configure the database server via HTTP(S). Due to insufficient validation of administrator-supplied configuration settings via the HTTP API, it is possible for a CouchDB administrator user to escalate their privileges to that of the operating system's user that CouchDB runs under, by bypassing the blacklist of configuration settings that are not allowed to…

Severity
High 7.2
Published
11 Jul 2018
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
12% in the next 30 daysHigher than 96% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache CouchDBServers and applications · cpe:a:apache:couchdb
  • Every version up to 1.7.1
  • From 2.0.0 up to 2.1.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-8007
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-8007