Unscored severity · published Aug 19, 2010
CVE-2010-2234
Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of administrators for direct requests…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of administrators for direct requests to an installation URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Couchdb · Apache
0.8.0; 0.8.1; 0.9.0; 0.9.1; 0.9.2; 0.10.0; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2234
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2234
seclists.org
http://seclists.org/fulldisclosure/2010/Aug/199
www.securityfocus.com
http://www.securityfocus.com/archive/1/513174/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/42501
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=624764
More from Couchdb
9.8
CVE-2022-24706
Remote Code Execution Vulnerability in Packaging
9.8
CVE-2020-1955
CouchDB version 3.0.0 shipped with a new configuration setting that governs access control to the entire database server called `require_valid_user_except_for_up`
9.8
CVE-2017-12635
Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to submit _users documents…
7.8
CVE-2018-14889
CouchDB in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local code execution vulnerability
7.8
CVE-2016-8742
The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation