Unscored CVE-2012-5649 EUVD-2012-5533GHSA-w437-cqhg-f7j8

Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers to execute arbitrary code via a JSONP callb…

Published May 23, 2014 · Updated Aug 6, 2024 · Assigned by redhat

Description

Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers to execute arbitrary code via a JSONP callback, related to Adobe Flash.

References

57314 vdb-entry
51765 third-party-advisory
20130114 CVE-2012-5649 Apache CouchDB JSONP arbitrary code execution with Adobe Flash mailing-list
FEDORA-2013-1387 vendor-advisory
FEDORA-2013-1375 vendor-advisory
MDVSA-2013:067 vendor-advisory