CVE-2022-24706 CISA KEV · Actively exploited

Apache CouchDB Insecure Default Initialization of Resource Vulnerability

CVSS score

—

EPSS probability

%92.5

Risk score

—

Published

4 y ago

Overview Public Exploits (8)Newsroom Vulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

sadshade/CVE-2022-24706-CouchDB-Exploit

GitHub

Apache CouchDB 3.2.1 - Remote Code Execution (RCE) (★5)

Public PoCSource updated: 21.05.2022 21:37:17

XmasSnowISBACK/CVE-2022-24706

GitHub

Apache CouchDB 3.2.1 - Remote Code Execution (RCE) (★0)

Public PoCSource updated: 28.05.2022 22:50:13

ahmetsabrimert/Apache-CouchDB-CVE-2022-24706-RCE-Exploits-Blog-post-

GitHub

I wrote a blog post about Apache CouchDB CVE-2022-24706 RCE Exploits (★0)

Public PoCSource updated: 14.06.2022 17:34:11

superzerosec/CVE-2022-24706

GitHub

CVE-2022-24706 POC exploit (★0)

Public PoCSource updated: 04.07.2022 11:06:27

LightningGod7/CVE-2022-24706-POC

GitHub

CouchDB & EPMD RCE exploit (★0)

Public PoCSource updated: 17.11.2022 15:20:39

becrevex/CVE-2022-24706

GitHub

Apache CouchDB 3.2.1 - Remote Code Execution (RCE) Checker (★0)

Public PoCSource updated: 29.03.2025 13:51:23

Apache CouchDB 3.2.1 - Remote Code Execution (RCE)

Exploit-DB

Apache CouchDB 3.2.1 - Remote Code Execution (RCE)

Exploit referenceSource updated: 11.05.2022 00:00:00

projectdiscovery/nuclei-templates/blob/main/network/cves/2022/CVE-2022-24706.yaml

Nuclei

Nuclei: CouchDB Erlang Distribution - Remote Command Execution

Exploit reference

Similar Vulnerabilities

10.0

CVE-2021-44228 Actively exploitedImproper input validation in Apache Log4j

Vendorsiemens Product6bk1602-0aa12-0tp0 firmware+16 etkilenen

Patch verified Public Exploits:30EPSS %1004 y ago

9.8

CVE-2017-5638 Actively exploitedstruts2: RCE when performing file upload based on Jakarta Multipart parser

Vendorapache Productstruts

Workaround Public Exploits:10EPSS %1009 y ago

9.8

CVE-2018-11776 Actively exploitedstruts2: Using specific results and namespaces can result in a remote code execution

Vendorapache Productstruts

Workaround Public Exploits:14EPSS %1008 y ago

9.8

CVE-2023-46604 Actively exploitedactivemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

VendorRed Hat Productred_hat_jboss_fuse_service_works_6:activemq-openwire+8 etkilenen

Partial patch Public Exploits:9EPSS %1003 y ago

9.8

CVE-2020-1938 Actively exploitedVulnerability in Apache Tomcat

Vendorapache Productgeode+16 etkilenen

Patch verified Public Exploits:12EPSS %996 y ago

9.8

CVE-2018-1273 Actively exploitedCode injection in Spring By Pivotal Spring Framework

VendorSpring by Pivotal ProductSpring Framework+10 etkilenen

Patch verified Public Exploits:8EPSS %978 y ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-24706"

Apache CouchDB Insecure Default Initialization of Resource Vulnerability

Public Exploits · GitHub and Metasploit Intelligence

Similar Vulnerabilities

Get this vulnerability through the API

DayBreach

Glossary & Reference

Directories & Feeds

RSS & Integration