PT-2020-20455
CVE-2020-9042
·
Published
2020-06-08
·
Updated
2020-06-11
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Couchbase Server version 6.0
Description
The issue allows credentials cached by a browser to be used for a CSRF attack if an administrator has used their browser to check the results of a REST API request.
Recommendations
For Couchbase Server version 6.0, consider implementing CSRF protection mechanisms to prevent exploitation, such as validating request headers or using tokens to verify request authenticity.
Found an issue in the description? Have something to add? Feel free to write us 👾