CVE-2017-12636
High · 7.2CVSS
7.2
EPSS
90.6%
Published
Nov 14, 2017
CISA due date
—
The record
CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB. This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user, including downloading and executing scripts from the public internet.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:7 | couchdb | 0 | 1.2.0-5+deb7u1 |
| SUSE:Enterprise Storage 4 | couchdb | 0 | 1.7.2-2.8.2 |
| SUSE:OpenStack Cloud 7 | couchdb | 0 | 1.7.2-2.8.2 |
| Ubuntu:16.04:LTS | couchdb | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | couchdb | 0 | No fix |
Related vulnerabilities
- CVE-2017-12635 Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it… Also affects couchdb
- CVE-2026-96376 Improper Neutralization of Special Elements used in an OS Command ("OS Command… CWE-78
- CVE-2026-113732 virtualenv is a tool for creating isolated virtual python environments. CWE-78
- CVE-2026-113776 virtualenv is a tool for creating isolated virtual python environments. CWE-78
- CVE-2026-113726 virtualenv is a tool for creating isolated virtual python environments. CWE-78
- CVE-2026-113725 virtualenv is a tool for creating isolated virtual python environments. CWE-78
- CVE-2026-113722 virtualenv is a tool for creating isolated virtual python environments. CWE-78
- CVE-2026-112943 launch-editor allows users to open files with line numbers in editor from Node.js. CWE-78