CVE-2009-0481
N/A
Published: February 9, 2009 at 05:00 PM UTC
Updated: June 16, 2026 at 11:05 PM UTC
1 product affected across 1 vendorBugzilla
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.7%
Description
Bugzilla 2.x before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote authenticated users to conduct cross-site scripting (XSS) and related attacks by uploading HTML and JavaScript attachments that are rendered by web browsers.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
2.102.122.142.14.12.14.22.14.32.14.42.14.52.162.16 rc12.16.12.16.102.16.112.16.22.16.32.16.42.16.52.16.62.16.72.16.82.16.92.16_rc22.172.17.12.17.22.17.32.17.42.17.52.17.62.17.72.182.18 rc12.18 rc22.18 rc32.18.12.18.22.18.32.18.42.18.52.18.62.18.72.18.82.18.92.192.19.12.19.22.19.32.202.20 rc12.20 rc22.20.12.20.22.20.32.20.42.20.52.20.62.212.21.12.21.22.222.22 rc12.22.12.22.22.22.32.22.42.22.52.22.63.0.03.0.13.0.23.0.33.0.43.0.53.0.63.23.3.1
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (5)
Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.htmlVendor Advisoryx_refsource_FEDORA
Source: [email protected]
https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.htmlQuick Info
StatusMODIFIED
CWE
CWE-79
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card