{"id":"CVE-2024-57177","aliases":["EUVD-2024-53538","GHSA-r385-c5fc-x56c"],"status":"published","title":"CouchAuth has a Server-Side Template Injection vulnerability in its email functionality","description":"A host header injection vulnerability exists in the NPM package of perfood/couch-auth \u003c= 0.21.2. By sending a specially crafted host header in the email change confirmation request, it is possible to trigger a SSTI which can be leveraged to run limited commands or leak server-side information","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00318,"percentile":0.2501,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1336","CWE-74"],"published":"2025-02-10T00:00:00Z","modified":"2026-06-17T08:13:21Z","affected":[{"source":"ghsa","ecosystem":"npm","package":"@perfood/couch-auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.21.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@perfood/couch-auth","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"0.21.2"}]}]}],"references":[{"url":"https://github.com/perfood/couch-auth","tags":["package"]},{"url":"https://github.com/waristea/cve-research/tree/main/CVE-2024-57177","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-57177","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-r385-c5fc-x56c"}],"sources":{"cve":[{"id":"CVE-2024-57177","description":"A host header injection vulnerability exists in the NPM package of perfood/couch-auth \u003c= 0.21.2. By sending a specially crafted host header in the email change confirmation request, it is possible to trigger a SSTI which can be leveraged to run limited commands or leak server-side information","status":"published","published":"2025-02-10T00:00:00Z","modified":"2025-12-17T15:56:55.495Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"adp"}],"cwes":["CWE-1336"],"updated_at":"2026-11-02T14:34:07.482552Z"}],"euvd":[{"id":"EUVD-2024-53538","description":"A host header injection vulnerability exists in the NPM package of perfood/couch-auth \u003c= 0.21.2. By sending a specially crafted host header in the email change confirmation request, it is possible to trigger a SSTI which can be leveraged to run limited commands or leak server-side information","status":"published","published":"2025-02-10T00:00:00Z","modified":"2025-12-17T15:56:55Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T19:49:04.015486Z"}],"ghsa":[{"id":"GHSA-r385-c5fc-x56c","title":"CouchAuth has a Server-Side Template Injection vulnerability in its email functionality","description":"A host header injection vulnerability exists in the NPM package of perfood/couch-auth \u003c= 0.21.2. By sending a specially crafted host header in the email change confirmation request, it is possible to trigger a SSTI which can be leveraged to run limited commands or leak server-side information.","status":"published","published":"2025-02-10T21:31:39Z","modified":"2025-12-18T15:30:18Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-74","CWE-1336"],"updated_at":"2026-11-02T14:39:13.204325Z"}],"nvd":[{"id":"CVE-2024-57177","description":"A host header injection vulnerability exists in the NPM package of perfood/couch-auth \u003c= 0.21.2. By sending a specially crafted host header in the email change confirmation request, it is possible to trigger a SSTI which can be leveraged to run limited commands or leak server-side information","status":"published","published":"2025-02-10T20:15:41.903Z","modified":"2026-06-17T08:13:21.883Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-1336"],"updated_at":"2026-11-02T14:10:44.033107Z"}],"osv":[{"id":"GHSA-r385-c5fc-x56c","title":"CouchAuth has a Server-Side Template Injection vulnerability in its email functionality","description":"A host header injection vulnerability exists in the NPM package of perfood/couch-auth \u003c= 0.21.2. By sending a specially crafted host header in the email change confirmation request, it is possible to trigger a SSTI which can be leveraged to run limited commands or leak server-side information.","status":"published","published":"2025-02-10T21:31:39Z","modified":"2025-12-18T16:11:14.520289Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-1336","CWE-74"],"updated_at":"2026-11-02T15:46:55.122811Z"}]}}