Lucene search
Ubuntu.comUB:CVE-2010-4567HistoryJan 28, 2011 - 12:00 a.m.
CVE-2010-4567
2011-01-2800:00:00
ubuntu.com
ubuntu.com
18
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.004
Percentile
72.2%
Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x
before 4.0rc2 does not properly handle whitespace preceding a (1)
javascript: or (2) data: URI, which allows remote attackers to conduct
cross-site scripting (XSS) attacks via the URL (aka bug_file_loc) field.
Related
cve
cve
CVE-2010-4567
2011-01-28 16:00:02
prion
prion
Cross site scripting
2011-01-28 16:00:00
cvelist
cvelist
CVE-2010-4567
2011-01-28 15:00:00
nvd
nvd
CVE-2010-4567
2011-01-28 16:00:02
openvas
openvas
Bugzilla Multiple Vulnerabilities
2011-01-26 00:00:00
Bugzilla Multiple Vulnerabilities
2011-01-26 00:00:00
FreeBSD Ports: bugzilla
2011-03-05 00:00:00
nessus
nessus
Fedora 13 : bugzilla-3.4.10-1.fc13 (2011-0755)
2011-02-03 00:00:00
FreeBSD : bugzilla -- multiple serious vulnerabilities (c8c927e5-2891-11e0-8f26-00151735203a)
2011-01-26 00:00:00
Fedora 14 : bugzilla-3.6.4-1.fc14 (2011-0741)
2011-02-03 00:00:00
freebsd
freebsd
bugzilla -- multiple serious vulnerabilities
2011-01-24 00:00:00
debian
debian
[SECURITY] [DSA 2322-1] bugzilla security update
2011-10-10 16:12:14
osv
osv
bugzilla - several
2011-10-10 00:00:00
gentoo
gentoo
Bugzilla: Multiple vulnerabilities
2011-10-10 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.004
Percentile
72.2%
Related for UB:CVE-2010-4567