CVE-2009-0481

bugzilla: XSS vulnerability via HTML and JavaScript attachments

Published Feb 9, 2009 CVSS 2.0 · 3.5 Low EPSS < 1% KEV · Not listed
Description
Bugzilla 2.x before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote authenticated users to conduct cross-site scripting (XSS) and related attacks by uploading HTML and JavaScript attachments that are rendered by web browsers.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2009-0485 Bugzilla 2.x before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote authenticated users to conduct cross-site scripting (XSS) and related attacks by uploading HTML and JavaScript attachments that are rendered by web browsers.
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 4:40 AM
Reserved
Feb 9, 2009, 12:00 AM
Status
Modified
Published
Feb 9, 2009, 5:30 PM
Modified
Jun 16, 2026, 11:05 PM
Severity
Moderate
Public date
Feb 9, 2009, 12:00 AM