CVE-2009-0484
Bugzilla 3.0-3.0.6, 3.2-3.2.0, 3.3-3.3.1 - Cross-Site Request Forgery via buglist.cgi
Title source: llmDescription
Cross-site request forgery (CSRF) vulnerability in Bugzilla 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote attackers to delete shared or saved searches via a link or IMG tag to buglist.cgi.
References (6)
Core 6
Core References
Vendor Advisory vendor-advisory
x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=466748
Vendor Advisory vendor-advisory
x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/34361
Vendor Advisory x_refsource_confirm
http://www.bugzilla.org/security/2.22.6/
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/33580
Scores
EPSS
0.0055
EPSS Percentile
42.1%
Details
CWE
CWE-352
Status
published
Products (9)
mozilla/bugzilla
3.0.0
mozilla/bugzilla
3.0.1
mozilla/bugzilla
3.0.2
mozilla/bugzilla
3.0.3
mozilla/bugzilla
3.0.4
mozilla/bugzilla
3.0.5
mozilla/bugzilla
3.0.6
mozilla/bugzilla
3.2
mozilla/bugzilla
3.3.1
Published
Feb 09, 2009
Tracked Since
Feb 18, 2026