CVE-2026-90798:詳細資料

CVE-2026-90798

2026-10-20
16h17 +00:00
2026-10-20
19h34 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication source or target to cause a denial of service via creating an infinite HTTP redirect loop. Users are recommended to upgrade to version 3.5.3, which fixes this issue.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-834 Excessive Iteration
The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.

參考資料