Vulnerabilities > CVE-2007-0791 - Unspecified vulnerability in Mozilla Bugzilla

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

mozilla

NVD

Published: 2007-02-06

Updated: 2024-11-21

Summary

Cross-site scripting (XSS) vulnerability in Atom feeds in Bugzilla 2.20.3, 2.22.1, and 2.23.3, and earlier versions down to 2.20.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerable Configurations

Part	Description	Count
Application	Mozilla Mozilla Bugzilla 2.23.2 Mozilla Bugzilla 2.21.2 Mozilla Bugzilla 2.22.1 Mozilla Bugzilla 2.20.1 Mozilla Bugzilla 2.23.3 Mozilla Bugzilla 2.22 Mozilla Bugzilla 2.20.3 Mozilla Bugzilla 2.20.2 Mozilla Bugzilla 2.21.1 Mozilla Bugzilla 2.21	11

References

http://osvdb.org/33090
http://osvdb.org/33090
http://secunia.com/advisories/24031
http://secunia.com/advisories/24031
http://securityreason.com/securityalert/2222
http://securityreason.com/securityalert/2222
http://securitytracker.com/id?1017585
http://securitytracker.com/id?1017585
http://www.bugzilla.org/security/2.20.3/
http://www.bugzilla.org/security/2.20.3/
http://www.securityfocus.com/archive/1/459025/100/0/threaded
http://www.securityfocus.com/archive/1/459025/100/0/threaded
http://www.securityfocus.com/bid/22380
http://www.securityfocus.com/bid/22380
http://www.vupen.com/english/advisories/2007/0477
http://www.vupen.com/english/advisories/2007/0477
https://exchange.xforce.ibmcloud.com/vulnerabilities/32248
https://exchange.xforce.ibmcloud.com/vulnerabilities/32248