Описание
Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of administrators for direct requests to an installation URL.
Ссылки
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:apache:couchdb:0.8.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:couchdb:0.8.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:couchdb:0.9.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:couchdb:0.9.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:couchdb:0.9.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:couchdb:0.10.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:couchdb:0.10.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:couchdb:0.11.0:*:*:*:*:*:*:*
EPSS
Процентиль: 76%
0.01833
Низкий
6.8 Medium
CVSS2
Дефекты
CWE-352
Связанные уязвимости
ubuntu
почти 16 лет назад
Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of administrators for direct requests to an installation URL.
debian
почти 16 лет назад
Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8. ...
github
около 4 лет назад
Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of administrators for direct requests to an installation URL.
EPSS
Процентиль: 76%
0.01833
Низкий
6.8 Medium
CVSS2
Дефекты
CWE-352