Ibm Cloudant (Apache Software Foundation) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-12-13. Vendor: Apache Software Foundation.

CVEs of Ibm Cloudant

• CVE-2023-45725 - CVSS 5.7 (medium), 2023-12-13: Design document functions which receive a user http request object may expose authorization or session cookie headers of the user who accesses the document.…
• CVE-2023-26268 - CVSS 5.3 (medium), 2023-05-02: Design documents with matching document IDs, from databases on the same cluster, may share a mutable Javascript environment when using these design document…
• CVE-2021-38295 - CVSS 7.3 (high), 2021-10-14: In Apache CouchDB, a malicious user with permission to create documents in a database is able to attach a HTML attachment to a document. If a CouchDB admin…