CVE Intelligence

Vulnerabilidades do Perfood Couchauth

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Perfood Couchauth: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:perfood:couchauth

CVE-2025-60794 Média · 6.5 CWE-316 20/11/2025
Session tokens and passwords in couch-auth 0.21.2 are stored in JavaScript objects and…
Session tokens and passwords in couch-auth 0.21.2 are stored in JavaScript objects and remain in memory without explicit clearing in src/user.ts lines 700-707. This creates a window of opportunity for sensitive data extraction through memory dumps, debugging tools, or other memory access techniques, potentially leading to session hijacking.