Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-0482

Cross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3.3.2, and other versions before 3.2 allows remote attackers to perform bug updating activities as other users via a link or IMG tag to process_bug.cgi.

Published

2009-02-09T17:30:00.360

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.8 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

4.9

Weaknesses
  • Type: Primary
    CWE-352
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mozilla bugzilla 2.10 Yes
Application mozilla bugzilla 2.12 Yes
Application mozilla bugzilla 2.14 Yes
Application mozilla bugzilla 2.14.1 Yes
Application mozilla bugzilla 2.14.2 Yes
Application mozilla bugzilla 2.14.3 Yes
Application mozilla bugzilla 2.14.4 Yes
Application mozilla bugzilla 2.14.5 Yes
Application mozilla bugzilla 2.16 Yes
Application mozilla bugzilla 2.16 Yes
Application mozilla bugzilla 2.16.1 Yes
Application mozilla bugzilla 2.16.2 Yes
Application mozilla bugzilla 2.16.3 Yes
Application mozilla bugzilla 2.16.4 Yes
Application mozilla bugzilla 2.16.5 Yes
Application mozilla bugzilla 2.16.6 Yes
Application mozilla bugzilla 2.16.7 Yes
Application mozilla bugzilla 2.16.8 Yes
Application mozilla bugzilla 2.16.9 Yes
Application mozilla bugzilla 2.16.10 Yes
Application mozilla bugzilla 2.16.11 Yes
Application mozilla bugzilla 2.16_rc2 Yes
Application mozilla bugzilla 2.17 Yes
Application mozilla bugzilla 2.17.1 Yes
Application mozilla bugzilla 2.17.2 Yes
Application mozilla bugzilla 2.17.3 Yes
Application mozilla bugzilla 2.17.4 Yes
Application mozilla bugzilla 2.17.5 Yes
Application mozilla bugzilla 2.17.6 Yes
Application mozilla bugzilla 2.17.7 Yes
Application mozilla bugzilla 2.18 Yes
Application mozilla bugzilla 2.18 Yes
Application mozilla bugzilla 2.18 Yes
Application mozilla bugzilla 2.18 Yes
Application mozilla bugzilla 2.18.1 Yes
Application mozilla bugzilla 2.18.2 Yes
Application mozilla bugzilla 2.18.3 Yes
Application mozilla bugzilla 2.18.4 Yes
Application mozilla bugzilla 2.18.5 Yes
Application mozilla bugzilla 2.18.6 Yes
Application mozilla bugzilla 2.18.7 Yes
Application mozilla bugzilla 2.18.8 Yes
Application mozilla bugzilla 2.18.9 Yes
Application mozilla bugzilla 2.19 Yes
Application mozilla bugzilla 2.19.1 Yes
Application mozilla bugzilla 2.19.2 Yes
Application mozilla bugzilla 2.19.3 Yes
Application mozilla bugzilla 2.20 Yes
Application mozilla bugzilla 2.20 Yes
Application mozilla bugzilla 2.20 Yes
Application mozilla bugzilla 2.20.1 Yes
Application mozilla bugzilla 2.20.2 Yes
Application mozilla bugzilla 2.20.3 Yes
Application mozilla bugzilla 2.20.4 Yes
Application mozilla bugzilla 2.20.5 Yes
Application mozilla bugzilla 2.20.6 Yes
Application mozilla bugzilla 2.21 Yes
Application mozilla bugzilla 2.21.1 Yes
Application mozilla bugzilla 2.21.2 Yes
Application mozilla bugzilla 2.22 Yes
Application mozilla bugzilla 2.22 Yes
Application mozilla bugzilla 2.22.1 Yes
Application mozilla bugzilla 2.22.2 Yes
Application mozilla bugzilla 2.22.3 Yes
Application mozilla bugzilla 2.22.4 Yes
Application mozilla bugzilla 2.22.5 Yes
Application mozilla bugzilla 2.22.6 Yes
Application mozilla bugzilla 3.0.0 Yes
Application mozilla bugzilla 3.0.1 Yes
Application mozilla bugzilla 3.0.2 Yes
Application mozilla bugzilla 3.0.3 Yes
Application mozilla bugzilla 3.0.4 Yes
Application mozilla bugzilla 3.0.5 Yes
Application mozilla bugzilla 3.0.6 Yes
Application mozilla bugzilla 3.2 Yes
Application mozilla bugzilla 3.3.1 Yes
References