Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-0483
HistoryFeb 09, 2009 - 12:00 a.m.

CVE-2009-0483

2009-02-0900:00:00
ubuntu.com
ubuntu.com
10

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

0.004 Low

EPSS

Percentile

73.8%

Cross-site request forgery (CSRF) vulnerability in Bugzilla 2.22 before
2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows
remote attackers to delete keywords and user preferences via a link or IMG
tag to (1) editkeywords.cgi or (2) userprefs.cgi.

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

0.004 Low

EPSS

Percentile

73.8%