CVE-2012-5650

published 2014-03-18

CVE-2012-5650: Cross-site scripting (XSS) vulnerability in the Futon UI in Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers to…

medium 4.3 CVSS 3.1

AV N AC M Au N C N I P A N

Cross-site scripting (XSS) vulnerability in the Futon UI in Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the browser-based test suite.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
apache	couchdb	<= 1.0.3	—
apache	couchdb	—	—
apache	couchdb	—	—
apache	couchdb	—	—
apache	couchdb	—	—
apache	couchdb	—	—
apache	couchdb	—	—

CWE-79