Security restrictions bypass in CouchDB - CVE-2021-38295

Vulnerability details

The vulnerability allows a remote user to escalate privileges within the application.

The vulnerability exists due to application does not properly impose security restrictions and allows a remote authenticated users with permission to create documents in a database to attach a HTML attachment to a document. If a CouchDB administrator opens such attachment the HTML code will be executed in the administrator's browser.

Affected software

How to mitigate CVE-2021-38295

Links to Public Exploits and PoC-codes

• Exploit #6902 - First-CVE2021 () (October 18, 2021)
• Exploit #6890 - CVE-2021-38295-PoC (A simple Python proof of concept for CVE-2021-38295.) (October 14, 2021)

External References

• http://docs.couchdb.org/en/stable/cve/2021-38295.html

Related Security Bulletins

• Security restrictions bypass in Apache CouchDB
• Multiple vulnerabilities in IBM Planning Analytics Local - IBM Planning Analytics Workspace