CVE-2013-1733

published 2013-10-24

CVE-2013-1733: Cross-site request forgery (CSRF) vulnerability in process_bug.cgi in Bugzilla 4.4.x before 4.4.1 allows remote attackers to hijack the authentication of…

medium 6.8 CVSS 3.1

AV N AC M Au N C P I P A P

Cross-site request forgery (CSRF) vulnerability in process_bug.cgi in Bugzilla 4.4.x before 4.4.1 allows remote attackers to hijack the authentication of arbitrary users for requests that modify bugs via vectors involving a midair-collision token.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
mozilla	bugzilla	—	—

CWE-352