Unscored CVE-2010-3854 EUVD-2010-3833GHSA-wh9m-hj6v-4mg6

Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface (aka Futon) in Apache CouchDB 0.8.0 through 1.0.1 a…

Published Feb 2, 2011 · Updated Aug 7, 2024 · Assigned by redhat

Description

Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface (aka Futon) in Apache CouchDB 0.8.0 through 1.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

couchdb-adminui-xss(65050) vdb-entry
[couchdb-dev] 20110128 CVE-2010-3854: Apache CouchDB Cross Site Scripting Issue mailing-list
70734 vdb-entry
ADV-2011-0263 vdb-entry
46066 vdb-entry
20110128 CVE-2010-3854: Apache CouchDB Cross Site Scripting Issue mailing-list
43111 third-party-advisory
1025013 vdb-entry