CVE-2021-38295 Privilege escalation vulnerability when using HTML attachments

🗓️ 14 Oct 2021 19:55:12Reported by apacheType

Privilege escalation via HTML attachments in Apache CouchD

Reporter	Title	Published	Views	Family All 21
GithubExploit	Exploit for Cross-site Scripting in Apache Couchdb	14 Oct 202115:45	–	githubexploit
Circl	CVE-2021-38295	14 Oct 202115:47	–	circl
CNNVD	Apache CouchDB 跨站脚本漏洞	12 Oct 202100:00	–	cnnvd
CNVD	Apache CouchDB permission permission and access control issues vulnerability	15 Oct 202100:00	–	cnvd
Tenable Nessus	Apache CouchDB < 3.1.2 Privilege Escalation	29 Sep 202300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2021-38295	4 Sep 202500:00	–	nessus
CVE	CVE-2021-38295	14 Oct 202119:55	–	cve
EUVD	EUVD-2021-24752	7 Oct 202500:30	–	euvd
Mageia	Updated couchdb packages fix security vulnerability	25 Nov 202113:06	–	mageia
NVD	CVE-2021-38295	14 Oct 202120:15	–	nvd

[
  {
    "product": "Apache CouchDB",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "3.1.2",
        "status": "affected",
        "version": "Apache CouchDB",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "IBM Cloudant",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "8201",
        "status": "affected",
        "version": "IBM Cloudant",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
docs	www.docs.couchdb.org/en/stable/cve/2021-38295.html

14 Oct 2021 19:55Current

7.5High risk

Vulners AI Score7.5

EPSS0.02474