CVE-2010-4570

Publication date 28 January 2011

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Description

Cross-site scripting (XSS) vulnerability in the duplicate-detection functionality in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote attackers to inject arbitrary web script or HTML via the summary field, related to the DataTable widget in YUI.

Status

Package Ubuntu Release Status
bugzilla 10.10 maverick
Not affected
10.04 LTS lucid
Not affected
9.10 karmic
Not affected
8.04 LTS hardy
Not affected
6.06 LTS dapper
Not affected

References

Other references

Access our resources on patching vulnerabilities