CVE-2014-1546: CSRF

Published Aug 14, 2014

Updated

The response function in the JSONP endpoint in WebService/Server/JSONRPC.pm in jsonrpc.cgi in Bugzilla 3.x and 4.x before 4.0.14, 4.1.x and 4.2.x before 4.2.10, 4.3.x and 4.4.x before 4.4.5, and 4.5.x before 4.5.5 accepts certain long callback values and does not restrict the initial bytes of a JSONP response, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks, and obtain sensitive information, via a crafted OBJECT element with SWF content consistent with the bzcallback character set.

Affected Software

124 affected components

Bugzilla=3.0

Bugzilla=3.0-rc1

Bugzilla=3.0.0

Bugzilla=3.0.1

Bugzilla=3.0.2

Bugzilla=3.0.3

Bugzilla=3.0.4

Bugzilla=3.0.5

Bugzilla=3.0.6

Bugzilla=3.0.7

Bugzilla=3.0.8

Bugzilla=3.0.9

Bugzilla=3.0.10

Bugzilla=3.0.11

Bugzilla=3.1.0

Bugzilla=3.1.1

Bugzilla=3.1.2

Bugzilla=3.1.3

Bugzilla=3.1.4

Bugzilla=3.2

Bugzilla=3.2-rc1

Bugzilla=3.2-rc2

Bugzilla=3.2.1

Bugzilla=3.2.2

Bugzilla=3.2.3

Bugzilla=3.2.4

Bugzilla=3.2.5

Bugzilla=3.2.6

Bugzilla=3.2.7

Bugzilla=3.2.8

Bugzilla=3.2.9

Bugzilla=3.2.10

Bugzilla=3.3

Bugzilla=3.3.1

Bugzilla=3.3.2

Bugzilla=3.3.3

Bugzilla=3.3.4

Bugzilla=3.4

Bugzilla=3.4-rc1

Bugzilla=3.4.1

Bugzilla=3.4.2

Bugzilla=3.4.3

Bugzilla=3.4.4

Bugzilla=3.4.5

Bugzilla=3.4.6

Bugzilla=3.4.7

Bugzilla=3.4.8

Bugzilla=3.4.9

Bugzilla=3.4.10

Bugzilla=3.4.11

Bugzilla=3.4.12

Bugzilla=3.4.13

Bugzilla=3.5

Bugzilla=3.5.1

Bugzilla=3.5.2

Bugzilla=3.5.3

Bugzilla=3.6

Bugzilla=3.6-rc1

Bugzilla=3.6.0

Bugzilla=3.6.1

Bugzilla=3.6.2

Bugzilla=3.6.3

Bugzilla=3.6.4

Bugzilla=3.6.5

Bugzilla=3.6.6

Bugzilla=3.6.7

Bugzilla=3.6.8

Bugzilla=3.6.9

Bugzilla=3.6.10

Bugzilla=3.6.11

Bugzilla=3.6.12

Bugzilla=3.6.13

Bugzilla=3.7

Bugzilla=3.7.1

Bugzilla=3.7.2

Bugzilla=3.7.3

Bugzilla=4.0

Bugzilla=4.0-rc1

Bugzilla=4.0-rc2

Bugzilla=4.0.1

Bugzilla=4.0.2

Bugzilla=4.0.3

Bugzilla=4.0.4

Bugzilla=4.0.5

Bugzilla=4.0.6

Bugzilla=4.0.7

Bugzilla=4.0.8

Bugzilla=4.0.9

Bugzilla=4.0.10

Bugzilla=4.0.11

Bugzilla=4.0.12

Bugzilla=4.0.13

Bugzilla=4.1

Bugzilla=4.1.1

Bugzilla=4.1.2

Bugzilla=4.1.3

Bugzilla=4.2

Bugzilla=4.2-rc1

Bugzilla=4.2-rc2

Bugzilla=4.2.1

Bugzilla=4.2.2

Bugzilla=4.2.3

Bugzilla=4.2.4

Bugzilla=4.2.5

Bugzilla=4.2.6

Bugzilla=4.2.7

Bugzilla=4.2.8

Bugzilla=4.2.9

Bugzilla=4.3

Bugzilla=4.3.1

Bugzilla=4.3.2

Bugzilla=4.3.3

Bugzilla=4.4

Bugzilla=4.4-rc1

Bugzilla=4.4-rc2

Bugzilla=4.4.1

Bugzilla=4.4.2

Bugzilla=4.4.3

Bugzilla=4.4.4

Bugzilla=4.5

Bugzilla=4.5.1

Bugzilla=4.5.2

Bugzilla=4.5.3

Bugzilla=4.5.4

Event History

Aug 14, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-1546?

CVE-2014-1546 has been classified as a moderate severity vulnerability due to its potential impact on user data integrity.

How do I fix CVE-2014-1546?

To fix CVE-2014-1546, you should upgrade to Bugzilla version 4.0.14, 4.2.10, 4.4.5, or 4.5.5 or later.

What types of Bugzilla versions are affected by CVE-2014-1546?

CVE-2014-1546 affects Bugzilla versions 3.x and 4.x prior to specified updates.

What is the nature of the vulnerability in CVE-2014-1546?

The vulnerability in CVE-2014-1546 allows for exploitation via long callback values in JSONP responses, which may lead to unexpected behavior.

Are there known exploits for CVE-2014-1546?

As of the last updates, there have been no widely reported known exploits for CVE-2014-1546.

CVE-2014-1546: CSRF

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2014-1546?

How do I fix CVE-2014-1546?

What types of Bugzilla versions are affected by CVE-2014-1546?

What is the nature of the vulnerability in CVE-2014-1546?

Are there known exploits for CVE-2014-1546?

Company

Resources

Contact