Name: CVE-2009-0482 URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0482 Assigned: 20090209 Reference: CONFIRM: http://www.bugzilla.org/security/2.22.6/ Cross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3.3.2, and other versions before 3.2 allows remote attackers to perform bug updating activities as other users via a link or IMG tag to process_bug.cgi.
Fixed via: https://admin.fedoraproject.org/updates/F10/FEDORA-2009-2417 https://admin.fedoraproject.org/updates/F10/FEDORA-2009-2418
bugzilla-3.2.2-2.fc9 has been pushed to the Fedora 9 stable repository. If problems still persist, please make note of it in this bug report.
bugzilla-3.2.2-2.fc10 has been pushed to the Fedora 10 stable repository. If problems still persist, please make note of it in this bug report.