CVE-2009-0482

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-02-09 · updated 2026-06-16
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3.3.2, and other versions before 3.2 allows remote attackers to perform bug updating activities as other users via a link or IMG tag to process_bug.cgi.

Affected products

Mozilla Bugzilla: 2.10, 2.12, 2.14, 2.14.1, 2.14.2, 2.14.3 (+70)

References

http://secunia.com/advisories/34361
http://www.bugzilla.org/security/2.22.6/
http://www.securityfocus.com/bid/33580
https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html
https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html
http://secunia.com/advisories/34361
http://www.bugzilla.org/security/2.22.6/
http://www.securityfocus.com/bid/33580
https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html
https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html

Get alerted when CVE-2009-0482 or the next vulnerability affects your stack