Unscored severity · published Feb 2, 2011
CVE-2010-3854
Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface (aka Futon) in Apache CouchDB 0.8.0 through 1.0.1 allow remote attackers to inject…
–
CVSS
5.9%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface (aka Futon) in Apache CouchDB 0.8.0 through 1.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.9% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Couchdb · Apache
0.8.0; 0.8.1; 0.9.0; 0.9.1; 0.9.2; 0.10.0; +7 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3854
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3854
mail-archives.apache.org
http://mail-archives.apache.org/mod_mbox/couchdb-dev/201101.mbox/%3CC840F655-C8C5-4EC6-8AA8-DD223E39C34A%40apache.org%3E
osvdb.org
http://osvdb.org/70734
Vendor Advisory
http://secunia.com/advisories/43111
www.securityfocus.com
http://www.securityfocus.com/archive/1/516058/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/46066
www.securitytracker.com
http://www.securitytracker.com/id?1025013
More from Couchdb
9.8
CVE-2022-24706
Remote Code Execution Vulnerability in Packaging
9.8
CVE-2020-1955
CouchDB version 3.0.0 shipped with a new configuration setting that governs access control to the entire database server called `require_valid_user_except_for_up`
9.8
CVE-2017-12635
Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to submit _users documents…
7.8
CVE-2018-14889
CouchDB in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local code execution vulnerability
7.8
CVE-2016-8742
The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation