CVE-2004-1061

Publication date 4 January 2005

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Description

Cross-site scripting (XSS) vulnerability in Bugzilla before 2.18, including 2.16.x before 2.16.11, allows remote attackers to inject arbitrary HTML and web script via forced error messages, as demonstrated using the action parameter.

Status

Package Ubuntu Release Status
bugzilla 7.04 feisty
Fixed 2.20-1
6.10 edgy
Fixed 2.20-1
6.06 LTS dapper
Fixed 2.20-1

References

Other references