CVE-2013-1733: CSRF
Published Oct 24, 2013
·Updated
Cross-site request forgery (CSRF) vulnerability in processbug.cgi in Bugzilla 4.4.x before 4.4.1 allows remote attackers to hijack the authentication of arbitrary users for requests that modify bugs via vectors involving a midair-collision token.
Affected Software
3 affected components
Bugzilla=4.4
Bugzilla=4.4-rc1
Bugzilla=4.4-rc2
Remediation
Patch Available
Event History
Oct 24, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1733?
CVE-2013-1733 has a medium severity rating due to its ability to facilitate unauthorized actions through CSRF attacks.
2
How do I fix CVE-2013-1733?
To fix CVE-2013-1733, upgrade Bugzilla to version 4.4.1 or later to ensure protection against this vulnerability.
3
What software is affected by CVE-2013-1733?
CVE-2013-1733 affects Bugzilla versions 4.4, 4.4-rc1, and 4.4-rc2.
4
What type of vulnerability is CVE-2013-1733?
CVE-2013-1733 is a cross-site request forgery (CSRF) vulnerability.
5
Can CVE-2013-1733 be exploited remotely?
Yes, CVE-2013-1733 can be exploited remotely by attackers to hijack the authentication of users.