Lucene search

MitreCVE-2010-4567

HistoryJan 28, 2011 - 4:00 p.m.

CVE-2010-4567

2011-01-2816:00:02

CWE-79

mitre

web.nvd.nist.gov

bugzilla

xss

cross-site scripting

security vulnerability

cve-2010-4567

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.004

Percentile

72.2%

JSON

Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 does not properly handle whitespace preceding a (1) javascript: or (2) data: URI, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the URL (aka bug_file_loc) field.

Affected configurations

Nvd

Node

mozillabugzillaRange≤3.2.9

mozillabugzillaMatch2.0

mozillabugzillaMatch2.2

mozillabugzillaMatch2.4

mozillabugzillaMatch2.6

mozillabugzillaMatch2.8

mozillabugzillaMatch2.9

mozillabugzillaMatch2.10

mozillabugzillaMatch2.12

mozillabugzillaMatch2.14

mozillabugzillaMatch2.14.1

mozillabugzillaMatch2.14.2

mozillabugzillaMatch2.14.3

mozillabugzillaMatch2.14.4

mozillabugzillaMatch2.14.5

mozillabugzillaMatch2.16

mozillabugzillaMatch2.16rc1

mozillabugzillaMatch2.16rc2

mozillabugzillaMatch2.16.1

mozillabugzillaMatch2.16.2

mozillabugzillaMatch2.16.3

mozillabugzillaMatch2.16.4

mozillabugzillaMatch2.16.5

mozillabugzillaMatch2.16.6

mozillabugzillaMatch2.16.7

mozillabugzillaMatch2.16.8

mozillabugzillaMatch2.16.9

mozillabugzillaMatch2.16.10

mozillabugzillaMatch2.16.11

mozillabugzillaMatch2.16_rc2

mozillabugzillaMatch2.17

mozillabugzillaMatch2.17.1

mozillabugzillaMatch2.17.2

mozillabugzillaMatch2.17.3

mozillabugzillaMatch2.17.4

mozillabugzillaMatch2.17.5

mozillabugzillaMatch2.17.6

mozillabugzillaMatch2.17.7

mozillabugzillaMatch2.18

mozillabugzillaMatch2.18rc1

mozillabugzillaMatch2.18rc2

mozillabugzillaMatch2.18rc3

mozillabugzillaMatch2.18.1

mozillabugzillaMatch2.18.2

mozillabugzillaMatch2.18.3

mozillabugzillaMatch2.18.4

mozillabugzillaMatch2.18.5

mozillabugzillaMatch2.18.6

mozillabugzillaMatch2.18.6\+

mozillabugzillaMatch2.18.7

mozillabugzillaMatch2.18.8

mozillabugzillaMatch2.18.9

mozillabugzillaMatch2.19

mozillabugzillaMatch2.19.1

mozillabugzillaMatch2.19.2

mozillabugzillaMatch2.19.3

mozillabugzillaMatch2.20

mozillabugzillaMatch2.20rc1

mozillabugzillaMatch2.20rc2

mozillabugzillaMatch2.20.1

mozillabugzillaMatch2.20.2

mozillabugzillaMatch2.20.3

mozillabugzillaMatch2.20.4

mozillabugzillaMatch2.20.5

mozillabugzillaMatch2.20.6

mozillabugzillaMatch2.20.7

mozillabugzillaMatch2.21

mozillabugzillaMatch2.21.1

mozillabugzillaMatch2.21.2

mozillabugzillaMatch2.22

mozillabugzillaMatch2.22rc1

mozillabugzillaMatch2.22.1

mozillabugzillaMatch2.22.2

mozillabugzillaMatch2.22.3

mozillabugzillaMatch2.22.4

mozillabugzillaMatch2.22.5

mozillabugzillaMatch2.22.6

mozillabugzillaMatch2.22.7

mozillabugzillaMatch2.23

mozillabugzillaMatch2.23.1

mozillabugzillaMatch2.23.2

mozillabugzillaMatch2.23.3

mozillabugzillaMatch2.23.4

mozillabugzillaMatch3.2

mozillabugzillaMatch3.2rc1

mozillabugzillaMatch3.2rc2

mozillabugzillaMatch3.2.1

mozillabugzillaMatch3.2.2

mozillabugzillaMatch3.2.3

mozillabugzillaMatch3.2.4

mozillabugzillaMatch3.2.5

mozillabugzillaMatch3.2.6

mozillabugzillaMatch3.2.7

mozillabugzillaMatch3.2.8

mozillabugzillaMatch3.4.1

mozillabugzillaMatch3.4.2

mozillabugzillaMatch3.4.3

mozillabugzillaMatch3.4.4

mozillabugzillaMatch3.4.5

mozillabugzillaMatch3.4.6

mozillabugzillaMatch3.4.7

mozillabugzillaMatch3.4.8

mozillabugzillaMatch3.4.9

mozillabugzillaMatch3.6.0

mozillabugzillaMatch3.6.1

mozillabugzillaMatch3.6.2

mozillabugzillaMatch3.6.3

mozillabugzillaMatch4.0

mozillabugzillaMatch4.0rc1

VendorProductVersionCPE
mozillabugzilla3.6.0cpe:/a:mozilla:bugzilla:3.6.0:::
mozillabugzilla2.2cpe:/a:mozilla:bugzilla:2.2:::
mozillabugzilla2.14cpe:/a:mozilla:bugzilla:2.14:::
mozillabugzilla2.20.5cpe:/a:mozilla:bugzilla:2.20.5:::
mozillabugzilla2.17.1cpe:/a:mozilla:bugzilla:2.17.1:::
mozillabugzilla2.16.6cpe:/a:mozilla:bugzilla:2.16.6:::
mozillabugzilla2.18.5cpe:/a:mozilla:bugzilla:2.18.5:::
mozillabugzilla2.17.4cpe:/a:mozilla:bugzilla:2.17.4:::
mozillabugzilla2.16cpe:/a:mozilla:bugzilla:2.16:::
mozillabugzilla3.4.6cpe:/a:mozilla:bugzilla:3.4.6:::

Vendor	Product	Version	CPE
mozilla	bugzilla	3.6.0	cpe:/a:mozilla:bugzilla:3.6.0:::
mozilla	bugzilla	2.2	cpe:/a:mozilla:bugzilla:2.2:::
mozilla	bugzilla	2.14	cpe:/a:mozilla:bugzilla:2.14:::
mozilla	bugzilla	2.20.5	cpe:/a:mozilla:bugzilla:2.20.5:::
mozilla	bugzilla	2.17.1	cpe:/a:mozilla:bugzilla:2.17.1:::
mozilla	bugzilla	2.16.6	cpe:/a:mozilla:bugzilla:2.16.6:::
mozilla	bugzilla	2.18.5	cpe:/a:mozilla:bugzilla:2.18.5:::
mozilla	bugzilla	2.17.4	cpe:/a:mozilla:bugzilla:2.17.4:::
mozilla	bugzilla	2.16	cpe:/a:mozilla:bugzilla:2.16:::
mozilla	bugzilla	3.4.6	cpe:/a:mozilla:bugzilla:3.4.6:::