CVE-2006-5455

published 2006-10-23

CVE-2006-5455: Cross-site request forgery (CSRF) vulnerability in editversions.cgi in Bugzilla before 2.22.1 and 2.23.x before 2.23.3 allows user-assisted remote attackers to…

low 2.6 CVSS 3.1

AV N AC H Au N C N I P A N

Cross-site request forgery (CSRF) vulnerability in editversions.cgi in Bugzilla before 2.22.1 and 2.23.x before 2.23.3 allows user-assisted remote attackers to create, modify, or delete arbitrary bug reports via a crafted URL.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
mozilla	bugzilla	<= 2.22.1	—
mozilla	bugzilla	—	—
mozilla	bugzilla	—	—
mozilla	bugzilla	—	—