Description
Cross-site scripting (XSS) vulnerability in the Futon UI in Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the browser-based test suite.
References (2)
Core 2
Core References
Various Sources mailing-list
x_refsource_mlist
http://mail-archives.apache.org/mod_mbox/couchdb-user/201301.mbox/%3C2FFF2FD7-8EAF-4EBF-AFDA-5AEB6EAC853F%40apache.org%3E
Third Party Advisory mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2013-01/0056.html
Scores
EPSS
0.0384
EPSS Percentile
88.9%
Details
CWE
CWE-79
Status
published
Products (7)
apache/couchdb
1.0.0
apache/couchdb
1.0.1
apache/couchdb
1.0.2
apache/couchdb
1.1.0
apache/couchdb
1.1.1
apache/couchdb
1.2.0
apache/couchdb
< 1.0.3
Published
Mar 18, 2014
Tracked Since
Feb 18, 2026