CVE-2010-3764

Published Nov 5, 2010 CVSS 2.0 · 5.0 Medium EPSS 2.4% KEV · Not listed
Description
The Old Charts implementation in Bugzilla 2.12 through 3.2.8, 3.4.8, 3.6.2, 3.7.3, and 4.1 creates graph files with predictable names in graphs/, which allows remote attackers to obtain sensitive information via a modified URL.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-3743 The Old Charts implementation in Bugzilla 2.12 through 3.2.8, 3.4.8, 3.6.2, 3.7.3, and 4.1 creates graph files with predictable names in graphs/, which allows remote attackers to obtain sensitive information via a modified URL.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 3:18 AM
Reserved
Oct 5, 2010, 12:00 AM
Status
Modified
Published
Nov 5, 2010, 5:00 PM
Modified
Jun 16, 2026, 11:23 PM