ByteOS Network

Source-cve@mitre.org

Published At-28 Jan, 2011 | 16:00

Updated At-29 Apr, 2026 | 01:13

Multiple cross-site request forgery (CSRF) vulnerabilities in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 allow remote attackers to hijack the authentication of arbitrary users for requests related to (1) adding a saved search in buglist.cgi, (2) voting in votes.cgi, (3) sanity checking in sanitycheck.cgi, (4) creating or editing a chart in chart.cgi, (5) column changing in colchange.cgi, and (6) adding, deleting, or approving a quip in quips.cgi.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 2.0

Base score: 6.8

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:P/A:P

Hyperlink	Source	Resource
http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053665.html	cve@mitre.org	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053678.html	cve@mitre.org	N/A
http://osvdb.org/70705	cve@mitre.org	N/A
http://osvdb.org/70706	cve@mitre.org	N/A
http://osvdb.org/70707	cve@mitre.org	N/A
http://osvdb.org/70708	cve@mitre.org	N/A
http://osvdb.org/70709	cve@mitre.org	N/A
http://osvdb.org/70710	cve@mitre.org	N/A
http://secunia.com/advisories/43033	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/43165	cve@mitre.org	N/A
http://www.bugzilla.org/security/3.2.9/	cve@mitre.org	Vendor Advisory
http://www.debian.org/security/2011/dsa-2322	cve@mitre.org	N/A
http://www.securityfocus.com/bid/45982	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2011/0207	cve@mitre.org	Vendor Advisory
http://www.vupen.com/english/advisories/2011/0271	cve@mitre.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=621090	cve@mitre.org	Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=621105	cve@mitre.org	Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=621107	cve@mitre.org	Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=621108	cve@mitre.org	Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=621109	cve@mitre.org	Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=621110	cve@mitre.org	Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/65003	cve@mitre.org	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053665.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053678.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/70705	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/70706	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/70707	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/70708	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/70709	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/70710	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/43033	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/43165	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.bugzilla.org/security/3.2.9/	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.debian.org/security/2011/dsa-2322	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/45982	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0207	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.vupen.com/english/advisories/2011/0271	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=621090	af854a3a-2127-422b-91ae-364da2661108	Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=621105	af854a3a-2127-422b-91ae-364da2661108	Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=621107	af854a3a-2127-422b-91ae-364da2661108	Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=621108	af854a3a-2127-422b-91ae-364da2661108	Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=621109	af854a3a-2127-422b-91ae-364da2661108	Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=621110	af854a3a-2127-422b-91ae-364da2661108	Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/65003	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History