NetSight
IP …
medium5.8

CVE-2009-0482

Cross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3.3.2, and other versions before 3.2 allows remote attackers to…

Impact

Cross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3.3.2, and other versions before 3.2 allows remote attackers to perform bug updating activities as other users via a link or IMG tag to process_bug.cgi.

Affected products

VendorProductAffected versions
MozillaBugzilla
Versions 2.10, 2.12, 2.14, 2.14.1, 2.14.2, 2.14.3

Weakness classification

CWE-352

References