Skip to content
OpenAdvisories

Product · Apache Software Foundation

IBM Cloudant

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Unscored —
    CVE-2021-38295 Public exploit

    Privilege escalation vulnerability when using HTML attachments

    In Apache CouchDB, a malicious user with permission to create documents in a database is able to attach a HTML attachment to a document. If a CouchDB admin opens that attachment in a browser, e.g. via the CouchDB admin interface Fauxton, any JavaScript code e…

    Apache Software Foundation Apache CouchDB IBM Cloudant couchdb Ubuntu