FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-11-23 17:01:17 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
608ed765-c700-11e3-848c-20cf30e32f6d	bugzilla -- Cross-Site Request Forgery A Bugzilla Security Advisory reports: The login form had no CSRF protection, meaning that an attacker could force the victim to log in using the attacker's credentials. If the victim then reports a new security sensitive bug, the attacker would get immediate access to this bug. Due to changes involved in the Bugzilla API, this fix is not backported to the 4.0 and 4.2 branches, meaning that Bugzilla 4.0.12 and older, and 4.2.8 and older, will remain vulnerable to this issue. Discovery 2014-04-17 Entry 2014-04-18 Modified 2014-04-18 bugzilla40 >= 2.0.0 lt 4.4.3 bugzilla42 >= 2.0.0 lt 4.4.3 bugzilla44 >= 2.0.0 lt 4.4.3 CVE-2014-1517 https://bugzilla.mozilla.org/show_bug.cgi?id=713926

VuXML ID

Description

608ed765-c700-11e3-848c-20cf30e32f6d

bugzilla -- Cross-Site Request Forgery

A Bugzilla Security Advisory reports:

The login form had no CSRF protection, meaning that an attacker could force the victim to log in using the attacker's credentials. If the victim then reports a new security sensitive bug, the attacker would get immediate access to this bug.

Due to changes involved in the Bugzilla API, this fix is not backported to the 4.0 and 4.2 branches, meaning that Bugzilla 4.0.12 and older, and 4.2.8 and older, will remain vulnerable to this issue.

Discovery 2014-04-17
Entry 2014-04-18
Modified 2014-04-18
bugzilla40

>= 2.0.0 lt 4.4.3

bugzilla42

>= 2.0.0 lt 4.4.3

bugzilla44

>= 2.0.0 lt 4.4.3

CVE-2014-1517
https://bugzilla.mozilla.org/show_bug.cgi?id=713926