CVE

Id
38648  
CVE No.
CVE-2009-1213  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 3.2 before 3.2.3, 3.3 before 3.3.4, and earlier versions allows remote attackers to hijack the authentication of arbitrary users for requests that use attachment editing.  
Phase
Assigned (20090331)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
423238 38648 CVE-2009-1213 CONFIRM:http://www.bugzilla.org/security/3.2.2/  View
423239 38648 CVE-2009-1213 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=476603  View
423240 38648 CVE-2009-1213 FEDORA:FEDORA-2009-3405  View
423241 38648 CVE-2009-1213 URL:https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00188.html  View
423242 38648 CVE-2009-1213 FEDORA:FEDORA-2009-3410  View
423243 38648 CVE-2009-1213 URL:https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00191.html  View
423244 38648 CVE-2009-1213 BID:34308  View
423245 38648 CVE-2009-1213 URL:http://www.securityfocus.com/bid/34308  View
423246 38648 CVE-2009-1213 SECUNIA:34545  View
423247 38648 CVE-2009-1213 URL:http://secunia.com/advisories/34545  View
423248 38648 CVE-2009-1213 SECUNIA:34547  View
423249 38648 CVE-2009-1213 URL:http://secunia.com/advisories/34547  View
423250 38648 CVE-2009-1213 SECUNIA:34624  View
423251 38648 CVE-2009-1213 URL:http://secunia.com/advisories/34624  View
423252 38648 CVE-2009-1213 VUPEN:ADV-2009-0887  View
423253 38648 CVE-2009-1213 URL:http://www.vupen.com/english/advisories/2009/0887  View
423254 38648 CVE-2009-1213 XF:bugzilla-attachment-csrf(49524)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40517 JVNDB-2009-001523 Windows XP の Microsoft GDI+ に含まれる gdiplus.dll の GpFont::SetData 関数における Off-by-one エラーの脆弱性 Windows XP の Microsoft GDI+ に含まれる gdiplus.dll の GpFont::SetData 関数には Off-by-one エラーの脆弱性が存在します。 CVE-2009-1217 38648 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001523.html  View