CVE-2010-3764
Publication date 5 November 2010
Last updated 24 July 2024
Ubuntu priority
Description
The Old Charts implementation in Bugzilla 2.12 through 3.2.8, 3.4.8, 3.6.2, 3.7.3, and 4.1 creates graph files with predictable names in graphs/, which allows remote attackers to obtain sensitive information via a modified URL.