BIT-COUCHDB-2023-26268 Apache CouchDB, IBM Cloudant: Information sharing via couchjs processes

🗓️ 06 Mar 2024 10:51:14Reported by GoogleType

osv🔗 osv.dev👁 19 Views

Design documents share mutable Javascript environment. Update to safe versions (Apache CouchDB 3.3.2 or 3.2.3). Avoid untrusted design documents

Reporter	Title	Published	Views	Family All 23
IBM Security Bulletins	Security Bulletin: Automation Assets in IBM Cloud Pak for Integration is vulnerable to remote information transfer due to CouchDB CVE-2023-26268	18 Aug 202308:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to loss of confidentiality due to [CVE-2023-26268]	24 Aug 202315:11	–	ibm
Circl	CVE-2023-26268	7 May 202302:30	–	circl
CNNVD	Apache CouchDB 信息泄露漏洞	2 May 202300:00	–	cnnvd
CNVD	Apache CouchDB Information Disclosure Vulnerability	8 May 202300:00	–	cnvd
Tenable Nessus	Apache CouchDB < 3.2.3 / 3.3.x < 3.3.2 Information Disclosure	4 May 202300:00	–	nessus
Tenable Nessus	FreeBSD : couchdb -- information sharing via couchjs processes (fd47fcfe-ec69-4000-b9ce-e5e62102c1c7)	17 Dec 202300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2023-26268	21 Aug 202500:00	–	nessus
CVE	CVE-2023-26268	2 May 202320:06	–	cve
Cvelist	CVE-2023-26268 Apache CouchDB, IBM Cloudant: Information sharing via couchjs processes	2 May 202320:06	–	cvelist

Source	Link
docs	www.docs.couchdb.org/en/stable/cve/2023-26268.html
lists	www.lists.apache.org/thread/ldkqs0nhpmho26bdxf4fon7w75hsq5gl
lists	www.lists.apache.org/thread/r2wvjfysg3d92lhhjd1qh3wfr8mlp0pp
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-26268

20 May 2025 10:02Current

5Medium risk

Vulners AI Score5

CVSS 3.14.4 - 5.3

EPSS0.01429

SSVC