CVE-2010-2234

概要

参考情報

• seclists.org/fulldisclosure/2010/Aug/199
• securityfocus.com/archive/1/513174/100/0/threaded
• securityfocus.com/bid/42501
• bugzilla.redhat.com/show_bug.cgi

couchdb のその他の脆弱性

• CVE-2023-45725中 5.7Design document functions which receive a user http request object may expose authorization or session cookie headers of the user who access…
• CVE-2023-26268中 5.3Design documents with matching document IDs, from databases on the same cluster, may share a mutable Javascript environment when using these…
• CVE-2022-24706緊急 9.8悪用確認済み（CISA KEV）In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin pr…
• CVE-2021-38295高 7.3In Apache CouchDB, a malicious user with permission to create documents in a database is able to attach a HTML attachment to a document. If …
• CVE-2020-1955緊急 9.8CouchDB version 3.0.0 shipped with a new configuration setting that governs access control to the entire database server called `require_val…