Package · Ubuntu

couchdb

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Unscored —

CVE-2021-38295 Public exploit

Privilege escalation vulnerability when using HTML attachments

In Apache CouchDB, a malicious user with permission to create documents in a database is able to attach a HTML attachment to a document. If a CouchDB admin opens that attachment in a browser, e.g. via the CouchDB admin interface Fauxton, any JavaScript code e…

Apache Software Foundation Apache CouchDB IBM Cloudant couchdb Ubuntu

Oct 14, 2021
Unscored —

CVE-2017-12636 Public exploit EPSS 91%

CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include p…

Apache Software Foundation Apache CouchDB couchdb Ubuntu

Nov 14, 2017
Unscored —

CVE-2017-12635 Public exploit EPSS 100%

Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB b…

Apache Software Foundation Apache CouchDB couchdb Ubuntu

Nov 14, 2017