CVE-2009-0482: Mozilla Bugzilla

Medium severity, CVSS 5.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3.3.2, and other versions before 3.2 allows remote attackers to perform bug updating activities as other users via a link or IMG tag to process_bug.cgi.

Affected products

• Mozilla Bugzilla: version 2.10 only; version 2.12 only; version 2.14 only; version 2.14.1 only; version 2.14.2 only; version 2.14.3 only; …

Published 2009-02-09. Last modified 2026-06-16.