CVE-2026-90798:详情

CVE-2026-90798

2026-10-20
16h17 +00:00
2026-10-20
19h34 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication source or target to cause a denial of service via creating an infinite HTTP redirect loop. Users are recommended to upgrade to version 3.5.3, which fixes this issue.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-834 Excessive Iteration
The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.

参考资料