Vulnerabilidades do Perfood Couchauth
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Perfood Couchauth: 1 registro(s), com versões afetadas e correções.cpe:2.3:a:perfood:couchauth
CVE-2025-60794
Média · 6.5
CWE-316 20/11/2025
Session tokens and passwords in couch-auth 0.21.2 are stored in JavaScript objects and…
Session tokens and passwords in couch-auth 0.21.2 are stored in JavaScript objects and remain in memory without explicit clearing in src/user.ts lines 700-707. This creates a window of opportunity for sensitive data extraction through memory dumps, debugging tools, or other memory access techniques, potentially leading to session hijacking.