Full title: Apache CouchDB 2.3.0 Cross Site Request Forgery Vulnerability Category: local exploits Platform: multiple Apache CouchDB version 2.3.0 suffers from cross site request forgery vulnerabilities providing there's a loose CORs policy. # 0day.today @ http://0day.today/