exploitDog

CVE-2009-0482

Опубликовано: 09 фев. 2009

Источник: redhat

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3.3.2, and other versions before 3.2 allows remote attackers to perform bug updating activities as other users via a link or IMG tag to process_bug.cgi.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-352

https://bugzilla.redhat.com/show_bug.cgi?id=484806bugzilla: CSRF vuln via process_bug.cgi

EPSS

Процентиль: 50%

0.00267

Низкий

Связанные уязвимости

CVE-2009-0482

ubuntu

почти 17 лет назад

Cross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3.3.2, and other versions before 3.2 allows remote attackers to perform bug updating activities as other users via a link or IMG tag to process_bug.cgi.

CVE-2009-0482

nvd

почти 17 лет назад

Cross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3.3.2, and other versions before 3.2 allows remote attackers to perform bug updating activities as other users via a link or IMG tag to process_bug.cgi.

CVE-2009-0482

debian

почти 17 лет назад

Cross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 ...

GHSA-q7v7-wgvv-h4x9

github

больше 3 лет назад

Cross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3.3.2, and other versions before 3.2 allows remote attackers to perform bug updating activities as other users via a link or IMG tag to process_bug.cgi.

EPSS

Процентиль: 50%

0.00267

Низкий