CVEvulnerability
CVE-2009-0482
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-02-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3.3.2, and other versions before 3.2 allows remote attackers to perform bug updating activities as other users via a link or IMG tag to process_bug.cgi.
Affected configurations
• mozilla bugzilla 2.10
• mozilla bugzilla 2.12
• mozilla bugzilla 2.14
• mozilla bugzilla 2.14.1
• mozilla bugzilla 2.14.2
• mozilla bugzilla 2.14.3
• mozilla bugzilla 2.14.4
• mozilla bugzilla 2.14.5
• mozilla bugzilla 2.16
• mozilla bugzilla 2.16.1
• mozilla bugzilla 2.16.2
• mozilla bugzilla 2.16.3
• mozilla bugzilla 2.16.4
• mozilla bugzilla 2.16.5
• mozilla bugzilla 2.16.6
• mozilla bugzilla 2.16.7
• mozilla bugzilla 2.16.8
• mozilla bugzilla 2.16.9
• mozilla bugzilla 2.16.10
• mozilla bugzilla 2.16.11
• mozilla bugzilla 2.16 rc2
• mozilla bugzilla 2.17
• mozilla bugzilla 2.17.1
• mozilla bugzilla 2.17.2
• mozilla bugzilla 2.17.3
• mozilla bugzilla 2.17.4
• mozilla bugzilla 2.17.5
• mozilla bugzilla 2.17.6
• mozilla bugzilla 2.17.7
• mozilla bugzilla 2.18
• mozilla bugzilla 2.18.1
• mozilla bugzilla 2.18.2
• mozilla bugzilla 2.18.3
• mozilla bugzilla 2.18.4
• mozilla bugzilla 2.18.5
• mozilla bugzilla 2.18.6
• mozilla bugzilla 2.18.7
• mozilla bugzilla 2.18.8
• mozilla bugzilla 2.18.9
• mozilla bugzilla 2.19
• mozilla bugzilla 2.19.1
• mozilla bugzilla 2.19.2
• mozilla bugzilla 2.19.3
• mozilla bugzilla 2.20
• mozilla bugzilla 2.20.1
• mozilla bugzilla 2.20.2
• mozilla bugzilla 2.20.3
• mozilla bugzilla 2.20.4
• mozilla bugzilla 2.20.5
• mozilla bugzilla 2.20.6
• mozilla bugzilla 2.21
• mozilla bugzilla 2.21.1
• mozilla bugzilla 2.21.2
• mozilla bugzilla 2.22
• mozilla bugzilla 2.22.1
• mozilla bugzilla 2.22.2
• mozilla bugzilla 2.22.3
• mozilla bugzilla 2.22.4
• mozilla bugzilla 2.22.5
• mozilla bugzilla 2.22.6
… and 9 more
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://secunia.com/advisories/34361 secunia.com
- http://www.bugzilla.org/security/2.22.6/ Vendor Advisory
- http://www.securityfocus.com/bid/33580 www.securityfocus.com
- https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html www.redhat.com
- http://secunia.com/advisories/34361 secunia.com
- http://www.bugzilla.org/security/2.22.6/ Vendor Advisory
- http://www.securityfocus.com/bid/33580 www.securityfocus.com
- https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html www.redhat.com