medium6.1
CVE-2024-25673
Couchbase Server 7.6.x before 7.6.2, 7.2.x before 7.2.6, and all earlier versions allows HTTP Host header injection.
Impact
Couchbase Server 7.6.x before 7.6.2, 7.2.x before 7.2.6, and all earlier versions allows HTTP Host header injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Couchbase | Couchbase Server | from 2.0.0 before 7.2.6 from 7.6.0 before 7.6.2 |