Exploit for Improper Privilege Management in Apache Couchdb

🗓️ 29 May 2026 19:32:11Reported by DungsocoolType

githubexploit

githubexploit🔗 github.com👁 105 Views

Exploits improper privilege management in CouchDB 1.6.0 on port 5984 enabling escalation.

Reporter	Title	Published	Views	Family All 69
Gitee	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat	16 May 202116:14	–	gitee
Gitee	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat	27 Apr 202114:33	–	gitee
Gitee	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat	22 Oct 202115:45	–	gitee
0day.today	Apache CouchDB Remote Code Execution Vulnerability	30 Nov 201700:00	–	zdt
0day.today	Apache CouchDB 1.7.0 and 2.x before 2.1.1 - Remote Privilege Escalation Exploit	23 Apr 201800:00	–	zdt
0day.today	Apache CouchDB < 2.1.0 - Remote Code Execution Exploit	20 Jun 201800:00	–	zdt
0day.today	Apache #CouchDB Arbitrary Command Execution Exploit	13 Jul 201800:00	–	zdt
FreeBSD	couchdb -- multiple vulnerabilities	14 Nov 201700:00	–	freebsd
ArchLinux	[ASA-201711-24] couchdb: multiple issues	16 Nov 201700:00	–	archlinux
BDU FSTEC	The vulnerability of the CouchDB database management system stems from differences in how JSON parsers based on Erlang and JavaScript operate. This allows a hacker to execute arbitrary shell commands on the server with administrator privileges.	24 Jan 201800:00	–	bdu_fstec

29 May 2026 19:32Current

7.8High risk

Vulners AI Score7.8

CVSS 39.8

CVSS 210

EPSS0.99838

CouchDB 1.6 Remote privilege escalation Remote code execution CouchDB port 5984 Duplicate roles bug Http API access