CVE-2010-3854

Apache CouchDB 0.8.0-1.0.1 - Cross-Site Scripting in Web Administration Interface

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface (aka Futon) in Apache CouchDB 0.8.0 through 1.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/65050
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/70734
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0263
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/46066
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/516058/100/0/threaded
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43111
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1025013

Scores

EPSS 0.0592
EPSS Percentile 92.4%

Details

CWE
CWE-79
Status published
Products (13)
apache/couchdb 0.8.0
apache/couchdb 0.8.1
apache/couchdb 0.9.0
apache/couchdb 0.9.1
apache/couchdb 0.9.2
apache/couchdb 0.10.0
apache/couchdb 0.10.1
apache/couchdb 0.10.2
apache/couchdb 0.11.0
apache/couchdb 0.11.1
... and 3 more
Published Feb 02, 2011
Tracked Since Feb 18, 2026