Description
Cross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3.3.2, and other versions before 3.2 allows remote attackers to perform bug updating activities as other users via a link or IMG tag to process_bug.cgi.
References
- FEDORA-2009-2418 vendor-advisory
- FEDORA-2009-2417 vendor-advisory
- 34361 third-party-advisory
- http://www.bugzilla.org/security/2.22.6/
- 33580 vdb-entry