ID |
CVE-2009-0484
|
Sažetak |
Cross-site request forgery (CSRF) vulnerability in Bugzilla 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote attackers to delete shared or saved searches via a link or IMG tag to buglist.cgi. |
Reference |
|
CVSS |
Base: | 5.8 |
Impact: | 4.9 |
Exploitability: | 8.6 |
|
Pristup |
Vektor | Složenost | Autentikacija |
NETWORK |
MEDIUM |
NONE |
|
Impact |
Povjerljivost | Cjelovitost | Dostupnost |
NONE |
PARTIAL |
PARTIAL |
|
CVSS vektor |
AV:N/AC:M/Au:N/C:N/I:P/A:P |
Zadnje važnije ažuriranje |
25-03-2009 - 05:50 |
Objavljeno |
09-02-2009 - 17:30 |