← CVE Intelligence

CVE-2026-90798

Apache CouchDB: Replicator follows redirects indefinitely PUBLISHED

Description (CNA)

A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication source or target to cause a denial of service via creating an infinite HTTP redirect loop. Users are recommended to upgrade to version 3.5.3, which fixes this issue.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache CouchDBaffected 0 before 3.5.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.