Apache CouchDB authorization issue vulnerability

Apache CouchDB versions 3.5.2 and earlier contain an authorization issue vulnerability. This vulnerability stems from chttpd’s lack of authorization checks, potentially allowing any request to read all contents of the user or replicator databases via unauthorized API endpoints...