CVE-2014-1546

Publication date 14 August 2014

Last updated 24 July 2024


Ubuntu priority

The response function in the JSONP endpoint in WebService/Server/JSONRPC.pm in jsonrpc.cgi in Bugzilla 3.x and 4.x before 4.0.14, 4.1.x and 4.2.x before 4.2.10, 4.3.x and 4.4.x before 4.4.5, and 4.5.x before 4.5.5 accepts certain long callback values and does not restrict the initial bytes of a JSONP response, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks, and obtain sensitive information, via a crafted OBJECT element with SWF content consistent with the _bz_callback character set.

Read the notes from the security team

Status

Package Ubuntu Release Status
bugzilla 14.04 LTS trusty Not in release
12.04 LTS precise Not in release
10.04 LTS lucid
Not affected

Notes


jdstrand

3.2 not-affected