Couchdb Security Vulnerabilities and Issues — Couchdb CVE List

Lucene search

ApacheCouchdb

4 matches found

CVE•added 2014/03/28 4:51 p.m.•65 views

CVE-2014-2668

Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via the count parameter to /_uuids.

5CVSS6.4AI score0.44323EPSS

CVE•added 2014/03/18 5:2 p.m.•63 views

CVE-2012-5650

Cross-site scripting (XSS) vulnerability in the Futon UI in Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the browser-based test suite.

4.3CVSS5.6AI score0.00986EPSS

CVE•added 2014/03/18 5:2 p.m.•61 views

CVE-2012-5641

Directory traversal vulnerability in the partition2 function in mochiweb_util.erl in MochiWeb before 2.4.0, as used in Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1, allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the default URI.

5CVSS6.6AI score0.04379EPSS

CVE•added 2014/05/23 2:55 p.m.•43 views

CVE-2012-5649

Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers to execute arbitrary code via a JSONP callback, related to Adobe Flash.

6.8CVSS7.5AI score0.03194EPSS