CVE-2026-90798

Published: Ott 20, 2026 Last Modified: Ott 20, 2026
ExploitDB:
Other exploit source:
Google Dorks:
LOW 0,6
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: low
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A

Description

AI Translation Available

A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication source or target to cause a denial of service via creating an infinite HTTP redirect loop.

Users are recommended to upgrade to version 3.5.3, which fixes this issue.

834

Excessive Iteration

Incomplete
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Availability
Potential Impacts:
Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Dos: Amplification Dos: Crash, Exit, Or Restart
Applicable Platforms
All platforms may be affected
View CWE Details
http://www.openwall.com/lists/oss-security/2026/10/20/13
http://www.openwall.com/lists/oss-security/2026/10/20/13
https://lists.apache.org/thread.html/pj83174r8f8f64odf47fwh…
https://lists.apache.org/thread.html/pj83174r8f8f64odf47fwhozbfjtot0f
https://lists.apache.org/thread/m6d526fj57pvq5pswm2lp1shbdz…
https://lists.apache.org/thread/m6d526fj57pvq5pswm2lp1shbdz3f417