Unscored CVE-2010-2234 EUVD-2010-2247GHSA-3c6h-p7mj-5m9j

Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication…

Published Aug 19, 2010 · Updated Aug 7, 2024 · Assigned by redhat

Description

Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of administrators for direct requests to an installation URL.

References

20100817 CVE-2010-2234: Apache CouchDB Cross Site Request Forgery Attack mailing-list
20100817 CVE-2010-2234: Apache CouchDB Cross Site Request Forgery Attack mailing-list
https://bugzilla.redhat.com/show_bug.cgi?id=624764
42501 vdb-entry