Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ress. After the session is created, it is possible to call authenticated CGI modules by sending the cookie username=admin in the HTTP request. The invoked CGI will check if a valid session is present and bound to the user's IP address.) It was found that it is possible for an unauthenticated attacker to create a valid session without a login. The network_mgr.cgi CGI module contains a command called "cgi_get_ipv6" that starts an admin session -- tied to the IP address of the user making the request -- if the additional parameter "flag" with the value "1" is provided. Subsequent invocation of commands that would normally require admin privileges now succeed if an attacker sets the username=adm
ent invocation of commands that would normally require admin privileges now succeed if an attacker sets the username=admin cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105359 - https://securify.nl/nl/advisory/SFY20180102/authentication-bypass-vulnerability-in-western-digital-my-cloud-allows-escalation-to-admin-privileges.html - https://support.wdc.com/knowledgebase/answer.aspx?ID=25952 - http://packetstormsecurity.com/files/173802/Western-Digital-MyCloud-Unauthenticated-Command-Injection.html
CVE ID: CVE-2018-17154 State: PUBLISHED Published: 2018-09-28T13:00:00Z Last Updated: 2024-09-16T19:31:06.490Z Vendors: FreeBSD Products: FreeBSD Problem Types: Denial of service Description: In FreeBSD before 11.2-STABLE(r338987), 11.2-RELEASE-p4, and 11.1-RELEASE-p15, due to insufficient memory checking in the freebsd4_getfsstat system call, a NULL pointer dereference can occur. Unprivileged authenticated local users may be able to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-EN-18:10.syscall.asc
CVE ID: CVE-2018-17155 State: PUBLISHED Published: 2018-09-28T13:00:00Z Last Updated: 2024-09-16T19:05:00.972Z Vendors: FreeBSD Products: FreeBSD Problem Types: Kernel memory disclosure Description: In FreeBSD before 11.2-STABLE(r338983), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338984), and 10.4-RELEASE-p13, due to insufficient initialization of memory copied to userland in the getcontext and swapcontext system calls, small amounts of kernel memory may be disclosed to userland processes. Unprivileged authenticated local users may be able to access small amounts privileged kernel data. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/adviso
ileged kernel data. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-EN-18:12.mem.asc
CVE ID: CVE-2018-17156 State: PUBLISHED Published: 2018-11-28T16:00:00 Last Updated: 2024-08-05T10:39:59.570Z Vendors: FreeBSD Products: FreeBSD Problem Types: Kernel buffer underwrite Description: In FreeBSD before 11.2-STABLE(r340268) and 11.2-RELEASE-p5, due to incorrectly accounting for padding on 64-bit platforms, a buffer underwrite could occur when constructing an ICMP reply packet when using a non-standard value for the net.inet.icmp.quotelen sysctl. Additional Analyst Notes: - CVE Program Container: References: - https://security.freebsd.org/advisories/FreeBSD-EN-18:13.icmp.asc - http://www.securityfocus.com/bid/106052
CVE ID: CVE-2018-17157 State: PUBLISHED Published: 2018-12-04T15:00:00 Last Updated: 2024-08-05T10:39:59.601Z Vendors: FreeBSD Products: FreeBSD Problem Types: Kernel integer overflow Description: In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error when handling opcodes can cause memory corruption by sending a specially crafted NFSv4 request. Unprivileged remote users with access to the NFS server may be able to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106192 - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-25/ - https://security.freebsd.org/advisories/FreeBSD
https://secuniaresearch.flexerasoftware.com/secunia_research/2018-25/ - https://security.freebsd.org/advisories/FreeBSD-SA-18:13.nfs.asc - http://www.securitytracker.com/id/1042164
CVE ID: CVE-2018-17158 State: PUBLISHED Published: 2018-12-04T15:00:00 Last Updated: 2024-08-05T10:39:59.632Z Vendors: FreeBSD Products: FreeBSD Problem Types: Kernel integer overflow Description: In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error can occur when handling the client address length field in an NFSv4 request. Unprivileged remote users with access to the NFS server can crash the system by sending a specially crafted NFSv4 request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106192 - https://security.freebsd.org/advisories/FreeBSD-SA-18:13.nfs.asc - http://www.securitytracker.com/id/1042164 -
/106192 - https://security.freebsd.org/advisories/FreeBSD-SA-18:13.nfs.asc - http://www.securitytracker.com/id/1042164 - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-24/
CVE ID: CVE-2018-17159 State: PUBLISHED Published: 2018-12-04T15:00:00 Last Updated: 2024-08-05T10:39:59.559Z Vendors: FreeBSD Products: FreeBSD Problem Types: Kernel improper bounds checking Description: In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, the NFS server lacks a bounds check in the READDIRPLUS NFS request. Unprivileged remote users with access to the NFS server can cause a resource exhaustion by forcing the server to allocate an arbitrarily large memory allocation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106192 - https://security.freebsd.org/advisories/FreeBSD-SA-18:13.nfs.asc - http://www.securitytracker.com/
ocus.com/bid/106192 - https://security.freebsd.org/advisories/FreeBSD-SA-18:13.nfs.asc - http://www.securitytracker.com/id/1042164 - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-24/
CVE ID: CVE-2018-17160 State: PUBLISHED Published: 2018-12-04T21:00:00 Last Updated: 2024-08-05T10:39:59.583Z Vendors: FreeBSD Products: FreeBSD Problem Types: Insufficient bounds checking Description: In FreeBSD before 11.2-STABLE(r341486) and 11.2-RELEASE-p6, insufficient bounds checking in one of the device models provided by bhyve can permit a guest operating system to overwrite memory in the bhyve host possibly permitting arbitrary code execution. A guest OS using a firmware image can cause the bhyve process to crash, or possibly execute arbitrary code on the host as root. Additional Analyst Notes: - CVE Program Container: References: - https://security.freebsd.org/advisories/FreeBSD-SA
oot. Additional Analyst Notes: - CVE Program Container: References: - https://security.freebsd.org/advisories/FreeBSD-SA-18:14.bhyve.asc - http://www.securityfocus.com/bid/106210
CVE ID: CVE-2018-17161 State: PUBLISHED Published: 2019-01-03T17:00:00 Last Updated: 2024-08-05T10:39:59.623Z Vendors: FreeBSD Products: FreeBSD Problem Types: Improper Input Validation Description: In FreeBSD before 11.2-STABLE(r348229), 11.2-RELEASE-p7, 12.0-STABLE(r342228), and 12.0-RELEASE-p1, insufficient validation of network-provided data in bootpd may make it possible for a malicious attacker to craft a bootp packet which could cause a stack buffer overflow. It is possible that the buffer overflow could lead to a Denial of Service or remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.freebsd.org/advisories/FreeBSD-SA-18:15.bootpd.
l Analyst Notes: - CVE Program Container: References: - https://security.freebsd.org/advisories/FreeBSD-SA-18:15.bootpd.asc - http://www.securityfocus.com/bid/106292
CVE ID: CVE-2018-17162 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-17163 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-17167 State: PUBLISHED Published: 2019-03-20T20:28:52 Last Updated: 2024-08-05T10:39:59.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrinterOn Enterprise 4.1.4 suffers from multiple authenticated stored XSS vulnerabilities via the (1) "Machine Host Name" or "Server Serial Number" field in the clustering configuration, (2) "name" field in the Edit Group configuration, (3) "Rule Name" field in the Access Control configuration, (4) "Service Name" in the Service Configuration, or (5) First Name or Last Name field in the Edit Account configuration. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DrunkenShells/Disclosures/tree
tion. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17167-XSS-PrinterON
CVE ID: CVE-2018-17168 State: PUBLISHED Published: 2019-04-18T16:36:51 Last Updated: 2024-08-05T10:39:59.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrinterOn Enterprise 4.1.4 contains multiple Cross Site Request Forgery (CSRF) vulnerabilities in the Administration page. For example, an administrator, by following a link, can be tricked into making unwanted changes to a printer (Disable, Approve, etc). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17168-CSRF-PrinterON
CVE ID: CVE-2018-17169 State: PUBLISHED Published: 2019-04-23T13:34:01 Last Updated: 2024-08-05T10:39:59.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XML external entity (XXE) vulnerability in PrinterOn version 4.1.4 and lower allows remote authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17169-XXE-PrinterON
CVE ID: CVE-2018-17170 State: PUBLISHED Published: 2019-06-28T17:46:07 Last Updated: 2024-08-05T10:39:59.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grouptime Teamwire Desktop Client 1.5.1 prior to 1.9.0 on Windows allows code injection via a template, leading to remote code execution. All backend versions prior to prod-2018-11-13-15-00-42 are affected. Additional Analyst Notes: - CVE Program Container: References: - https://research.hisolutions.com/2019/06/web-vulnerabilities-are-coming-to-the-desktop-template-injections-lead-to-rce-in-teamwire/
CVE ID: CVE-2018-17172 State: PUBLISHED Published: 2019-01-03T03:00:00 Last Updated: 2024-08-05T10:39:59.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200 allows unauthenticated command injection. Additional Analyst Notes: - CVE Program Container: References: - https://securitydocs.business.xerox.com/wp-content/uploads/2018/12/cert_Security_Mini_Bulletin_XRX18AL_for_ALB80xx-C80xx_v1.1.pdf
CVE ID: CVE-2018-17173 State: PUBLISHED Published: 2018-09-21T17:00:00 Last Updated: 2024-08-05T10:39:59.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45448/ - http://mamaquieroserpentester.blogspot.com/2018/09/lg-supersign-rce-to-luna-and-back-to.html - https://www.exploit-db.com/exploits/46795/ - http://packetstormsecurity.com/files/152733/LG-Supersign-EZ-CMS-Remote-Code-Execution.html
CVE ID: CVE-2018-17174 State: PUBLISHED Published: 2018-09-21T17:00:00 Last Updated: 2024-08-05T10:39:59.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow was discovered in the xtimor NMEA library (aka nmealib) 0.5.3. nmea_parse() in parser.c allows an attacker to trigger denial of service (even arbitrary code execution in a certain context) in a product using this library via malformed data. Additional Analyst Notes: - CVE Program Container: References: - https://www.cnblogs.com/tr3e/p/9662324.html
CVE ID: CVE-2018-17175 State: PUBLISHED Published: 2018-09-18T17:00:00Z Last Updated: 2024-09-17T02:16:40.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the marshmallow library before 2.15.1 and 3.x before 3.0.0b9 for Python, the schema "only" option treats an empty list as implying no "only" option, which allows a request that was intended to expose no fields to instead expose all fields (if the schema is being filtered dynamically using the "only" option, and there is a user role that produces an empty value for "only"). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/marshmallow-code/marshmallow/pull/777 - https://github.com/marshmal
Program Container: References: - https://github.com/marshmallow-code/marshmallow/pull/777 - https://github.com/marshmallow-code/marshmallow/pull/782 - https://github.com/marshmallow-code/marshmallow/issues/772
CVE ID: CVE-2018-17176 State: PUBLISHED Published: 2018-09-18T18:00:00Z Last Updated: 2024-09-16T20:43:30.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: A replay issue was discovered on Neato Botvac Connected 2.2.0 devices. Manual control mode requires authentication, but once recorded, the authentication (always transmitted in cleartext) can be replayed to /bin/webserver on port 8081. There are no nonces, and timestamps are not checked at all. Additional Analyst Notes: - CVE Program Container: References: - https://media.ccc.de/v/2018-124-pinky-brain-are-taking-over-the-world-with-vacuum-cleaners
CVE ID: CVE-2018-17177 State: PUBLISHED Published: 2018-09-18T18:00:00Z Last Updated: 2024-09-17T01:25:54.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices. Static encryption is used for the copying of so-called "black box" logs (event logs and core dumps) to a USB stick. These logs are RC4-encrypted with a 9-character password of *^JEd4W!I that is obfuscated by hiding it within a custom /bin/rc4_crypt binary. Additional Analyst Notes: - CVE Program Container: References: - https://media.ccc.de/v/2018-124-pinky-brain-are-taking-over-the-world-with-vacuum-cleaners
CVE ID: CVE-2018-17178 State: PUBLISHED Published: 2018-09-18T18:00:00Z Last Updated: 2024-09-17T02:42:40.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Neato Botvac Connected 2.2.0 devices. They execute unauthenticated manual drive commands (sent to /bin/webserver on port 8081) if they already have an active session. Commands like forward, back, arc-left, arc-right, pivot-left, and pivot-right are executed even though the web socket replies with { "message" : "invalid authorization header" }. Without an active session, commands are still interpreted, but (except for eco-on and eco-off) have no effect, since without active driving, a driving direct
re still interpreted, but (except for eco-on and eco-off) have no effect, since without active driving, a driving direction does not change anything. Additional Analyst Notes: - CVE Program Container: References: - https://media.ccc.de/v/2018-124-pinky-brain-are-taking-over-the-world-with-vacuum-cleaners
CVE ID: CVE-2018-17179 State: PUBLISHED Published: 2019-05-17T15:57:39 Last Updated: 2024-08-05T10:39:59.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenEMR before 5.0.1 Patch 7. There is SQL Injection in the make_task function in /interface/forms/eye_mag/php/taskman_functions.php via /interface/forms/eye_mag/taskman.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openemr/openemr/commit/3e22d11c7175c1ebbf3d862545ce6fee18f70617 - https://www.open-emr.org/wiki/index.php/OpenEMR_Patches#5.0.1_Patch_.289.2F9.2F18.29
CVE ID: CVE-2018-17180 State: PUBLISHED Published: 2019-05-17T15:58:56 Last Updated: 2024-08-05T10:39:59.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenEMR before 5.0.1 Patch 7. Directory Traversal exists via docid=../ to /portal/lib/download_template.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.open-emr.org/wiki/index.php/OpenEMR_Patches#5.0.1_Patch_.289.2F9.2F18.29 - https://github.com/openemr/openemr/commit/4963fe4932a0a4e1e982642226174e9931d09541
CVE ID: CVE-2018-17181 State: PUBLISHED Published: 2019-05-17T16:00:15 Last Updated: 2024-08-05T10:39:59.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenEMR before 5.0.1 Patch 7. SQL Injection exists in the SaveAudit function in /portal/lib/paylib.php and the portalAudit function in /portal/lib/appsql.class.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.open-emr.org/wiki/index.php/OpenEMR_Patches#5.0.1_Patch_.289.2F9.2F18.29 - https://github.com/openemr/openemr/commit/4963fe4932a0a4e1e982642226174e9931d09541
CVE ID: CVE-2018-17182 State: PUBLISHED Published: 2018-09-19T09:00:00 Last Updated: 2024-08-05T10:39:59.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3776-1/ - https://usn.ubuntu.com/3776-2/ - https://usn.ubuntu.com/3777-1/ - https://lists.debian.org/debian-lts-announce/2018/10/msg00003.htm
.ubuntu.com/3776-2/ - https://usn.ubuntu.com/3777-1/ - https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html - https://security.netapp.com/advisory/ntap-20190204-0001/ - https://access.redhat.com/errata/RHSA-2018:3656 - https://github.com/torvalds/linux/commit/7a9cdebdcc17e426fb5287e4a82db1dfe86339b2 - https://www.debian.org/security/2018/dsa-4308 - http://www.securityfocus.com/bid/105417 - https://www.exploit-db.com/exploits/45497/ - https://www.openwall.com/lists/oss-security/2018/09/18/4 - http://www.securitytracker.com/id/1041748 - https://usn.ubuntu.com/3777-2/ - http://www.securityfocus.com/bid/106503 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/
77-2/ - http://www.securityfocus.com/bid/106503 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7a9cdebdcc17e426fb5287e4a82db1dfe86339b2 - https://usn.ubuntu.com/3777-3/
CVE ID: CVE-2018-17183 State: PUBLISHED Published: 2018-09-19T15:00:00 Last Updated: 2024-08-05T10:39:59.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be used by remote attackers able to supply crafted PostScript to potentially overwrite or replace error handlers to inject code. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3773-1/ - https://access.redhat.com/errata/RHSA-2018:3834 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=fb713b3818b52d8a6cf62c951eba2e1795ff9624 - https://bugs.ghostscript.com/show_bug.cgi?id=699708 - https://
3Ba=commit%3Bh=fb713b3818b52d8a6cf62c951eba2e1795ff9624 - https://bugs.ghostscript.com/show_bug.cgi?id=699708 - https://lists.debian.org/debian-lts-announce/2018/09/msg00038.html
CVE ID: CVE-2018-17184 State: PUBLISHED Published: 2018-11-06T19:00:00Z Last Updated: 2024-09-17T02:52:18.945Z Vendors: Apache Software Foundation Products: Apache Syncope Problem Types: Information Disclosure Description: A malicious user with enough administration entitlements can inject html-like elements containing JavaScript statements into Connector names, Report names, AnyTypeClass keys and Policy descriptions. When another user with enough administration entitlements edits one of the Entities above via Admin Console, the injected JavaScript code is executed. Additional Analyst Notes: - CVE Program Container: References: - https://syncope.apache.org/security#CVE-2018-17184:_Stored_XSS
CVE ID: CVE-2018-17185 State: REJECTED Published: 2019-12-09T17:19:48 Last Updated: 2019-12-09T17:19:48 Description: No description available.
CVE ID: CVE-2018-17186 State: PUBLISHED Published: 2018-11-06T21:00:00Z Last Updated: 2024-09-17T00:31:30.652Z Vendors: Apache Software Foundation Products: Apache Syncope Problem Types: Remote code execution Description: An administrator with workflow definition entitlements can use DTD to perform malicious operations, including but not limited to file read, file write, and code execution. Additional Analyst Notes: - CVE Program Container: References: - https://syncope.apache.org/security#CVE-2018-17186:_XXE_on_BPMN_definitions
CVE ID: CVE-2018-17187 State: PUBLISHED Published: 2018-11-13T15:00:00 Last Updated: 2024-08-05T10:39:59.671Z Vendors: Apache Software Foundation Products: Apache Qpid Proton-J Problem Types: Hostname verification support not implemented, exception thrown if configured. Description: The Apache Qpid Proton-J transport includes an optional wrapper layer to perform TLS, enabled by use of the 'transport.ssl(...)' methods. Unless a verification mode was explicitly configured, client and server modes previously defaulted as documented to not verifying a peer certificate, with options to configure this explicitly or select a certificate verification mode with or without hostname verification being
ions to configure this explicitly or select a certificate verification mode with or without hostname verification being performed. The latter hostname verifying mode was not implemented in Apache Qpid Proton-J versions 0.3 to 0.29.0, with attempts to use it resulting in an exception. This left only the option to verify the certificate is trusted, leaving such a client vulnerable to Man In The Middle (MITM) attack. Uses of the Proton-J protocol engine which do not utilise the optional transport TLS wrapper are not impacted, e.g. usage within Qpid JMS. Uses of Proton-J utilising the optional transport TLS wrapper layer that wish to enable hostname verification must be upgraded to version 0.30.
ing the optional transport TLS wrapper layer that wish to enable hostname verification must be upgraded to version 0.30.0 or later and utilise the VerifyMode#VERIFY_PEER_NAME configuration, which is now the default for client mode usage unless configured otherwise. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/jira/browse/PROTON-1962 - http://www.securityfocus.com/bid/105935 - https://mail-archives.apache.org/mod_mbox/qpid-users/201811.mbox/%3CCAFitrpQSV73Vz7rJYfLJK7gvEymZSCR5ooWUeU8j4jzRydk-eg%40mail.gmail.com%3E - https://qpid.apache.org/cves/CVE-2018-17187.html
CVE ID: CVE-2018-17188 State: PUBLISHED Published: 2019-01-02T14:00:00 Last Updated: 2024-08-05T10:39:59.575Z Vendors: Apache Software Foundation Products: Apache CouchDB Problem Types: Remote Privilege Escalations Description: Prior to CouchDB version 2.3.0, CouchDB allowed for runtime-configuration of key components of the database. In some cases, this lead to vulnerabilities where CouchDB admin users could access the underlying operating system as the CouchDB user. Together with other vulnerabilities, it allowed full system entry for unauthenticated users. Rather than waiting for new vulnerabilities to be discovered, and fixing them as they come up, the CouchDB development team decided to