2 matches found
VulnCheck KEV: CVE-2017-12635
Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to submit users documents with duplicate keys for 'roles' used for access control within the database, including the special case 'admin' role,...
10CVSS7.3AI score0.9974EPSS
SaveIn wildExploits23References795
20