CVE-2008-2103: XSS

Published May 7, 2008

Updated

Cross-site scripting (XSS) vulnerability in Bugzilla 2.17.2 and later allows remote attackers to inject arbitrary web script or HTML via the id parameter to the "Format for Printing" view or "Long Format" bug list.

Affected Software

48 affected components

Bugzilla=3.0.4

Bugzilla=3.1.3

Bugzilla=3.0.1

Bugzilla=2.17.6

Bugzilla=2.18.5

Bugzilla=2.19.3

Bugzilla=2.20-rc2

Bugzilla=2.18.6

Bugzilla=2.17.2

Bugzilla=2.20-rc1

Bugzilla=2.18-rc1

Bugzilla=3.1.1

Bugzilla=3.1.2

Bugzilla=2.20.5

Bugzilla=2.20.6

Bugzilla=2.22.3

Bugzilla=2.17.4

Bugzilla=2.23.2

Bugzilla=2.21.2

Bugzilla=2.22.1

Bugzilla=2.23.4

Bugzilla=2.20.1

Bugzilla=2.23.3

Bugzilla=2.23.1

Bugzilla=2.22.2

Bugzilla=2.18.1

Bugzilla=2.22-rc1

Bugzilla=2.19.1

Bugzilla=3.1.4

Bugzilla=2.17.5

Bugzilla=2.22

Bugzilla=2.17.3

Bugzilla=3.0.3

Bugzilla=2.20.3

Bugzilla=3.0.2

Bugzilla=2.18.4

Bugzilla=2.18.3

Bugzilla=2.17.7

Bugzilla=2.20.2

Bugzilla=2.20.4

Bugzilla=2.21.1

Bugzilla=2.18-rc3

Bugzilla=2.23

Bugzilla=2.18.2

Bugzilla=2.18-rc2

Bugzilla=2.22.4

Bugzilla=3.0_rc1

Bugzilla=2.19.2

Event History

May 7, 2008

CVE Published

via MITRE·08:07 PM

Data Sourced

via MITRE·08:07 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2103?

CVE-2008-2103 has been classified as a moderate severity vulnerability due to its nature of allowing cross-site scripting (XSS) attacks.

How do I fix CVE-2008-2103?

To remediate CVE-2008-2103, upgrade to a newer version of Bugzilla that addresses this XSS vulnerability.

Which versions of Bugzilla are affected by CVE-2008-2103?

CVE-2008-2103 affects Bugzilla versions 2.17.2 and later up to certain 3.x releases.

What type of attacks can be conducted through CVE-2008-2103?

CVE-2008-2103 can be exploited by attackers to inject arbitrary web scripts or HTML into the application, leading to XSS attacks.

Can CVE-2008-2103 be exploited remotely?

Yes, CVE-2008-2103 can be exploited remotely by attackers through the manipulated id parameter in Bugzilla.