Read the docs
TI-2019-06524 Aliases CVE-2019-9039GHSA-g622-r636-qfqh

In Couchbase Sync Gateway 2.1.2, an attacker with access to the Sync Gateway’s public…

Priority MEDIUM 47CWE-89Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
SQL injection
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA and GitHub. Impact type from CWE-89.

Summary

In Couchbase Sync Gateway 2.1.2, an attacker with access to the Sync Gateway’s public REST API was able to issue additional N1QL statements and extract sensitive data or call arbitrary N1QL functions through the parameters "startkey" and "endkey" on the "_all_docs" endpoint. By issuing nested queries with CPU-intensive operations they may have been able to cause increased resource usage and denial of service conditions. The _all_docs endpoint is not required for Couchbase Mobile replication and external access to this REST endpoint has been blocked to mitigate this issue. This issue has been fixed in versions 2.5.0 and 2.1.3.

Why it matters now

EPSS 0.02741 86th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed github.com/couchbase/sync_gateway (Go): 2.5.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—github.com/couchbase/sync_gateway (Go)before 2.5.02.5.0Patch availableGHSA-g622-r636-qfqh
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • github.com/couchbase/sync_gateway (Go) Vendor— Affected before 2.5.0 Fixed in 2.5.0 Patch available GHSA-g622-r636-qfqh

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:couchbase:sync_gateway:2.1.2:*:*:*:*:*:*:*2.1.2VulnerableCouchbase
  • cpe:2.3:a:couchbase:sync_gateway:2.1.2:*:*:*:*:*:*:* Versions 2.1.2 Vulnerable ·Couchbase

Remediation

  • Fix · GHSA-g622-r636-qfqh github.com/couchbase/sync_gateway (Go) Fixed in 2.5.0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-9039
  2. 2026-10-03 Alias added: GHSA-g622-r636-qfqh

References

Exploit 1

Advisory 2

Other 3

  • TI-2022-14194 An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. CVSS 3.1CRITICAL 9.8
  • TI-2021-19724 An issue was discovered in Couchbase Sync Gateway 2.7.0 through 2.8.2. CVSS 3.1HIGH 8.1
  • TI-2020-07257 In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster… CVSS 3.1HIGH 7.5
  • TI-2025-32615 An issue was discovered in Couchbase Sync Gateway before 3.2.6. CVSS 3.1HIGH 7.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences