CVE-2022-42950: Couchbase Server

Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in Couchbase Server 7.x before 7.0.5 and 7.1.x before 7.1.2. A crafted HTTP REST request from an administrator account to the Couchbase Server Backup Service can exhaust memory resources, causing the process to be killed, which can be used for denial of service.

Affected products

• Couchbase Couchbase Server: from 7.0.0, before 7.0.5 (fixed in 7.0.5); from 7.1.0, before 7.1.2 (fixed in 7.1.2)

Published 2023-02-06. Last modified 2026-06-17.