Cross-site scripting (XSS) vulnerability in Bugzilla 2.4 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3, when Internet Explorer before 9 or Safari before 5.0.6 is used for Raw Unified mode, allows remote attackers to inject arbitrary web script or HTML via a crafted patch, related to content sniffing.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2011-08-09T19:00:00

Updated: 2024-08-06T23:00:33.597Z

Reserved: 2011-06-03T00:00:00

Link: CVE-2011-2379

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2011-08-09T19:55:01.433

Modified: 2021-07-23T15:12:30.843

Link: CVE-2011-2379

cve-icon Redhat

No data.