CVE-2009-1213
Published: 1 April 2009
Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 3.2 before 3.2.3, 3.3 before 3.3.4, and earlier versions allows remote attackers to hijack the authentication of arbitrary users for requests that use attachment editing.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
bugzilla Launchpad, Ubuntu, Debian |
dapper |
Ignored
(end of life)
|
| gutsy |
Ignored
(end of life, was needed)
|
|
| hardy |
Ignored
(end of life)
|
|
| intrepid |
Ignored
(end of life, was needed)
|
|
| jaunty |
Ignored
(end of life)
|
|
| karmic |
Not vulnerable
(3.2.4.0-3)
|
|
| lucid |
Not vulnerable
(3.2.4.0-3)
|
|
| maverick |
Not vulnerable
(3.2.4.0-3)
|
|
| natty |
Not vulnerable
(3.2.4.0-3)
|
|
| oneiric |
Not vulnerable
(3.2.4.0-3)
|
|
| upstream |
Released
(3.2.4.0-3)
|