Lucene search
FreeBSD9DEFB2D6-1404-11E4-8CAE-20CF30E32F6DHistoryJul 24, 2014 - 12:00 a.m.
bugzilla -- Cross Site Request Forgery
2014-07-2400:00:00
vuxml.freebsd.org
18
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
0.002
Percentile
52.9%
A Bugzilla Security Advisory reports:
Adobe does not properly restrict the SWF file format,
which allows remote attackers to conduct cross-site
request forgery (CSRF) attacks against Bugzilla’s JSONP
endpoint, possibly obtaining sensitive bug information,
via a crafted OBJECT element with SWF content satisfying
the character-set requirements of a callback API.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | bugzilla44 | < 4.4.5 | UNKNOWN |
Related
nessus
nessus
FreeBSD : bugzilla -- Cross Site Request Forgery (9defb2d6-1404-11e4-8cae-20cf30e32f6d)
2014-07-26 00:00:00
Fedora 19 : bugzilla-4.2.10-1.fc19 (2014-8919)
2014-08-08 00:00:00
Fedora 20 : bugzilla-4.2.10-1.fc20 (2014-8920)
2014-08-04 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: bugzilla-4.2.10-1.fc19
2014-08-07 15:33:42
[SECURITY] Fedora 20 Update: bugzilla-4.2.10-1.fc20
2014-08-01 06:03:03
[SECURITY] Fedora 19 Update: bugzilla-4.2.11-1.fc19
2014-10-22 08:50:36
cvelist
cvelist
CVE-2014-1546
2014-08-14 10:00:00
openvas
openvas
Fedora Update for bugzilla FEDORA-2014-8920
2014-08-05 00:00:00
Fedora Update for bugzilla FEDORA-2014-8919
2014-08-08 00:00:00
Mageia: Security Advisory (MGASA-2014-0349)
2022-01-28 00:00:00
ubuntucve
ubuntucve
CVE-2014-1546
2014-08-14 00:00:00
securityvulns
securityvulns
Security advisory for Bugzilla 4.5.5, 4.4.5, 4.2.10, and 4.0.14
2014-10-15 00:00:00
prion
prion
Cross site request forgery (csrf)
2014-08-14 11:15:00
cve
cve
CVE-2014-1546
2014-08-14 11:15:23
mageia
mageia
Updated bugzilla packages fix a CSRF vulnerability
2014-08-25 12:44:11
nvd
nvd
CVE-2014-1546
2014-08-14 11:15:23
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
0.002
Percentile
52.9%
Related for 9DEFB2D6-1404-11E4-8CAE-20CF30E32F6D