CVE-2009-0482 | BDVDB-2026-34821 Detail

Description#

Cross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3.3.2, and other versions before 3.2 allows remote attackers to perform bug updating activities as other users via a link or IMG tag to process_bug.cgi.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html
https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html
http://secunia.com/advisories/34361
http://www.bugzilla.org/security/2.22.6/
http://www.securityfocus.com/bid/33580

Exploit#

No public exploit known

History#

Version 12009-02-09Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.