CVE-2016-2803

CVE-2016-2803 is a cross-site scripting vulnerability in Bugzilla’s dependency graphs affecting versions 2.16rc1–4.4.11 and 4.5.1–5.0.2. The issue allows remote attackers to inject arbitrary web script or HTML. OpenVAS and Fedora advisories confirm the bug is exploitable via the Bugzilla dependen...