Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-1213

Опубликовано: 30 мар. 2009
Источник: redhat

Описание

Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 3.2 before 3.2.3, 3.3 before 3.3.4, and earlier versions allows remote attackers to hijack the authentication of arbitrary users for requests that use attachment editing.

Ссылки на источники

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-352
https://bugzilla.redhat.com/show_bug.cgi?id=494398bugzilla: CSRF vulnerability in attachment editing

Связанные уязвимости

ubuntu логотип

CVE-2009-1213

ubuntu
больше 16 лет назад

Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 3.2 before 3.2.3, 3.3 before 3.3.4, and earlier versions allows remote attackers to hijack the authentication of arbitrary users for requests that use attachment editing.

nvd логотип

CVE-2009-1213

nvd
больше 16 лет назад

Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 3.2 before 3.2.3, 3.3 before 3.3.4, and earlier versions allows remote attackers to hijack the authentication of arbitrary users for requests that use attachment editing.

debian логотип

CVE-2009-1213

debian
больше 16 лет назад

Cross-site request forgery (CSRF) vulnerability in attachment.cgi in B ...

github логотип

GHSA-h5vc-337f-mrrj

github
больше 3 лет назад

Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 3.2 before 3.2.3, 3.3 before 3.3.4, and earlier versions allows remote attackers to hijack the authentication of arbitrary users for requests that use attachment editing.