Vulnerabilities (CVE)

Vendor filter

Couchbase Subscribe

Product filter

Sync Gateway Subscribe


1 total CVE
CVE Vendors Products Updated CVSS
CVE-2019-9039 1 Couchbase 1 Sync Gateway 2019-10-10 7.5
In Couchbase Sync Gateway 2.1.2, an attacker with access to the Sync Gateway?s public REST API was able to issue additional N1QL statements and extract sensitive data or call arbitrary N1QL functions through the parameters "startkey" and "endkey"...