ID de Prueba:	1.3.6.1.4.1.25623.1.0.100094
Categoría:	Web application abuses
Título:	Bugzilla 'attachment.cgi' CSRF Vulnerability
Resumen:	Bugzilla is prone to a cross-site request-forgery vulnerability.
Descripción:	Summary: Bugzilla is prone to a cross-site request-forgery vulnerability. Vulnerability Impact: An attacker can exploit this issue to submit attachments in the context of the logged-in user. Affected Software/OS: This issue affects versions prior to Bugzilla 3.2.3 and 3.3.4. Solution: The vendor released updates to address this issue. Please see the references for more information. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1213 BugTraq ID: 34308 http://www.securityfocus.com/bid/34308 https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00188.html https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00191.html http://secunia.com/advisories/34545 http://secunia.com/advisories/34547 http://secunia.com/advisories/34624 http://www.vupen.com/english/advisories/2009/0887 XForce ISS Database: bugzilla-attachment-csrf(49524) https://exchange.xforce.ibmcloud.com/vulnerabilities/49524
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.