| Package | Affected versions | Patched versions |
|---|---|---|
| bugzilla | = 2.23= 2.23.1= 2.23.2≤ 2.22.1 |
Cross-site request forgery (CSRF) vulnerability in editversions.cgi in Bugzilla before 2.22.1 and 2.23.x before 2.23.3 allows user-assisted remote attackers to create, modify, or delete arbitrary bug reports via a crafted URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free