exploitDog

CVE-2009-1213

Опубликовано: 30 мар. 2009

Источник: redhat

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 3.2 before 3.2.3, 3.3 before 3.3.4, and earlier versions allows remote attackers to hijack the authentication of arbitrary users for requests that use attachment editing.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-352

https://bugzilla.redhat.com/show_bug.cgi?id=494398bugzilla: CSRF vulnerability in attachment editing

EPSS

Процентиль: 57%

0.00347

Низкий

Связанные уязвимости

CVE-2009-1213

ubuntu

почти 17 лет назад

Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 3.2 before 3.2.3, 3.3 before 3.3.4, and earlier versions allows remote attackers to hijack the authentication of arbitrary users for requests that use attachment editing.

CVE-2009-1213

nvd

почти 17 лет назад

Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 3.2 before 3.2.3, 3.3 before 3.3.4, and earlier versions allows remote attackers to hijack the authentication of arbitrary users for requests that use attachment editing.

CVE-2009-1213

debian

почти 17 лет назад

Cross-site request forgery (CSRF) vulnerability in attachment.cgi in B ...

GHSA-h5vc-337f-mrrj

github

почти 4 года назад

Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 3.2 before 3.2.3, 3.3 before 3.3.4, and earlier versions allows remote attackers to hijack the authentication of arbitrary users for requests that use attachment editing.

EPSS

Процентиль: 57%

0.00347

Низкий