Description
Cross-site scripting (XSS) vulnerability in Atom feeds in Bugzilla 2.20.3, 2.22.1, and 2.23.3, and earlier versions down to 2.20.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- 33090 vdb-entry
- 2222 third-party-advisory
- 22380 vdb-entry
- 1017585 vdb-entry
- 24031 third-party-advisory
- 20070203 Security Advisory for Bugzilla 2.20.3, 2.22.1, and 2.23.3 mailing-list
- http://www.bugzilla.org/security/2.20.3/
- ADV-2007-0477 vdb-entry
- bugzilla-atom-feed-xss(32248) vdb-entry