NVD

Id
28652  
Name
CVE-2015-8509  
Description
Template.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2 does not properly construct CSV files, which allows remote attackers to obtain sensitive information by leveraging a web browser that interprets CSV data as JavaScript code.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-01-03  
Modified Date
2016-12-07  
Seq
2015-8509  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
150696 28652 CVE-2015-8509 http://packetstormsecurity.com/files/135048/Bugzilla-Cross-Site-Scripting-Information-Leak.html  View
150697 28652 CVE-2015-8509 20151222 Security advisory for Bugzilla 5.0.2, 4.4.11 and 4.2.16  View
150698 28652 CVE-2015-8509 79662  View
150699 28652 CVE-2015-8509 1034556  View
150700 28652 CVE-2015-8509 https://bugzilla.mozilla.org/show_bug.cgi?id=1232785  View
150701 28652 CVE-2015-8509 https://www.bugzilla.org/security/4.2.15/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11328 JVNDB-2015-006648 Bugzilla の Template.pm における重要な情報を取得される脆弱性 Bugzilla の Template.pm は、CSV ファイルを適切に構成しないため、重要な情報を取得される脆弱性が存在します。 CVE-2015-8509 85734 CVE-2015-8509 28652 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006648.html 2015-12-17 2016-01-08 View