CVE-2012-5650

2014-03-1817:02:49

CWE-79

[email protected]

web.nvd.nist.gov

couchdb

apache

xss

vulnerability

web script

html

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

High

0.028 Low

EPSS

Percentile

90.7%

JSON

Cross-site scripting (XSS) vulnerability in the Futon UI in Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the browser-based test suite.

Affected configurations

NVD

Node

apachecouchdbRange≤1.0.3

apachecouchdbMatch1.0.0

apachecouchdbMatch1.0.1

apachecouchdbMatch1.0.2

apachecouchdbMatch1.1.0

apachecouchdbMatch1.1.1

apachecouchdbMatch1.2.0

CPENameOperatorVersion
apache:couchdbapache couchdble1.0.3
apache:couchdbapache couchdbeq1.0.0
apache:couchdbapache couchdbeq1.0.1
apache:couchdbapache couchdbeq1.0.2
apache:couchdbapache couchdbeq1.1.0
apache:couchdbapache couchdbeq1.1.1
apache:couchdbapache couchdbeq1.2.0

CPE	Name	Operator	Version
apache:couchdb	apache couchdb	le	1.0.3
apache:couchdb	apache couchdb	eq	1.0.0
apache:couchdb	apache couchdb	eq	1.0.1
apache:couchdb	apache couchdb	eq	1.0.2
apache:couchdb	apache couchdb	eq	1.1.0
apache:couchdb	apache couchdb	eq	1.1.1
apache:couchdb	apache couchdb	eq	1.2.0