A vulnerability was found in Couchbase Server up to 7.2.3 and classified as critical. This issue affects some unknown processing of the file /diag/eval of the component SQL++ Handler. The manipulation leads to improper access controls.

The identification of this vulnerability is CVE-2023-49931. The attack can only be initiated within the local network. There is no exploit available.

It is recommended to upgrade the affected component.