CVE-2011-0046 | BDVDB-2026-44875 Detail
Description#
Multiple cross-site request forgery (CSRF) vulnerabilities in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 allow remote attackers to hijack the authentication of arbitrary users for requests related to (1) adding a saved search in buglist.cgi, (2) voting in votes.cgi, (3) sanity checking in sanitycheck.cgi, (4) creating or editing a chart in chart.cgi, (5) column changing in colchange.cgi, and (6) adding, deleting, or approving a quip in quips.cgi.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://bugzilla.mozilla.org/show_bug.cgi?id=621105
- http://osvdb.org/70710
- http://www.securityfocus.com/bid/45982
- https://bugzilla.mozilla.org/show_bug.cgi?id=621090
- http://secunia.com/advisories/43165
- http://osvdb.org/70709
- http://www.bugzilla.org/security/3.2.9/
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053665.html
- http://osvdb.org/70708
- http://www.vupen.com/english/advisories/2011/0271
- https://bugzilla.mozilla.org/show_bug.cgi?id=621109
- http://secunia.com/advisories/43033
- https://bugzilla.mozilla.org/show_bug.cgi?id=621107
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65003
- http://www.vupen.com/english/advisories/2011/0207
Show all 22
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.