Cross-site request forgery (CSRF) vulnerability in xmlrpc.cgi in Bugzilla 4.0.2 through 4.0.4 and 4.1.1 through 4.2rc2, when mod_perl is used, allows remote attackers to hijack the authentication of arbitrary users for requests that modify the product's installation via the XML-RPC API.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2012-02-25T02:00:00

Updated: 2024-08-06T18:23:30.978Z

Reserved: 2012-01-09T00:00:00

Link: CVE-2012-0453

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2012-02-25T04:21:42.247

Modified: 2018-01-11T02:29:01.670

Link: CVE-2012-0453

cve-icon Redhat

No data.