PT-2012-1733

CVE-2011-3669

Published

2012-01-02

Updated

2012-02-02

CVSS 2.0

6.8

Medium

MetricsAV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Bugzilla versions 2.x through 4.x before 4.2rc1

Description A cross-site request forgery issue exists, allowing remote attackers to hijack user authentication for uploading attachments.

Recommendations For Bugzilla versions 2.x through 4.x before 4.2rc1, update to version 4.2rc1 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾