Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2021-38295— Privilege escalation vulnerability when using HTML attachments

Quick assessment

Affected
Apache Software Foundation Apache CouchDB
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Apache CouchDB是美国阿帕奇（Apache）基金会的使用Erlang开发的一套面向文档的数据库系统。 Apache CouchDB 存在跨站脚本漏洞，该漏洞源于应用程序没有适当地施加安全限制，允许具有在数据库中创建文档权限的远程身份验证用户将HTML附件附加到文档。如果CouchDB管理员打开此类附件，则HTML代码将在管理员的浏览器中执行。以下产品及版本受到影响：Apache CouchDB 3.0.0, 3.0.1, 3.1.0, 3.1.1。

AI Predicted 8.6 Difficulty: Easy EPSS 2.75% · P86

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2021-38295

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Privilege escalation vulnerability when using HTML attachments
Source: CVE Program / CVE List V5
Vulnerability Description
In Apache CouchDB, a malicious user with permission to create documents in a database is able to attach a HTML attachment to a document. If a CouchDB admin opens that attachment in a browser, e.g. via the CouchDB admin interface Fauxton, any JavaScript code embedded in that HTML attachment will be executed within the security context of that admin. A similar route is available with the already deprecated _show and _list functionality. This privilege escalation vulnerability allows an attacker to add or remove data in any database or make configuration changes. This issue affected Apache CouchDB prior to 3.1.2
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Apache CouchDB 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apache CouchDB是美国阿帕奇（Apache）基金会的使用Erlang开发的一套面向文档的数据库系统。 Apache CouchDB 存在跨站脚本漏洞，该漏洞源于应用程序没有适当地施加安全限制，允许具有在数据库中创建文档权限的远程身份验证用户将HTML附件附加到文档。如果CouchDB管理员打开此类附件，则HTML代码将在管理员的浏览器中执行。以下产品及版本受到影响：Apache CouchDB 3.0.0, 3.0.1, 3.1.0, 3.1.1。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Apache Software Foundation Apache CouchDB Apache CouchDB ~ 3.1.2 -
Apache Software Foundation IBM Cloudant IBM Cloudant ~ 8201 -

II. Public POCs for CVE-2021-38295

# POC Description Source Link Shenlong Link
1 A simple Python proof of concept for CVE-2021-38295. https://github.com/ProfessionallyEvil/CVE-2021-38295-PoC POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-38295

请登录查看更多情报信息。

Other References for CVE-2021-38295 (1)

IV. Related Vulnerabilities

Same product: Apache CouchDB
Same vendor: Apache Software Foundation

V. Comments for CVE-2021-38295

No comments yet

Leave a comment