What’s Vulnerable › Vulnerabilities

CVE-2010-2234

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2010-08-19 · updated 2026-06-16
• Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of administrators for direct requests to an installation URL.

Affected products

• Apache Software Foundation Apache CouchDB: 0.8.0, 0.8.1, 0.9.0, 0.9.1, 0.9.2, 0.10.0 (+2)

References

• http://seclists.org/fulldisclosure/2010/Aug/199
• http://www.securityfocus.com/archive/1/513174/100/0/threaded
• http://www.securityfocus.com/bid/42501
• https://bugzilla.redhat.com/show_bug.cgi?id=624764
• http://seclists.org/fulldisclosure/2010/Aug/199
• http://www.securityfocus.com/archive/1/513174/100/0/threaded
• http://www.securityfocus.com/bid/42501
• https://bugzilla.redhat.com/show_bug.cgi?id=624764

Get alerted when CVE-2010-2234 or the next vulnerability affects your stack