2.12. CVE-2018-8007: Apache CouchDB Remote Code Execution

This privilege escalation effectively allows a CouchDB admin user to gain arbitrary remote code execution, bypassing CVE-2017-12636

Upgrades from previous 1.x and 2.x versions in the same series should be seamless.

This issue was discovered by Francesco Oddo of .