CVE-2003-0602: XSS
Multiple cross-site scripting vulnerabilities (XSS) in Bugzilla 2.16.x before 2.16.3 and 2.17.x before 2.17.4 allow remote attackers to insert arbitrary HTML or web script via (1) multiple default German and Russian HTML templates or (2) ALT and NAME attributes in AREA tags as used by the GraphViz graph generation feature for local dependency graphs.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0602?
CVE-2003-0602 has a medium severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2003-0602?
To fix CVE-2003-0602, upgrade Bugzilla to version 2.16.3 or 2.17.4 or later, which address this vulnerability.
Which versions of Bugzilla are affected by CVE-2003-0602?
CVE-2003-0602 affects Bugzilla versions 2.16.x before 2.16.3 and 2.17.x before 2.17.4.
What types of attacks can CVE-2003-0602 enable?
CVE-2003-0602 can enable remote attackers to perform cross-site scripting (XSS) attacks via arbitrary HTML or web script.
What are the symptoms of exploitation of CVE-2003-0602?
Symptomatic exploitation of CVE-2003-0602 may include unexpected web page behavior, data theft, or unauthorized actions taken on behalf of users.