VDB
GCVE-110-MAGEIA-2015-48
GCVE-110-MAGEIA-2015-48
Advisory Published
Updated bugzilla packages fix security vulnerability:
Some code in Bugzilla does not properly utilize 3 arguments form for open()
and it is possible for an account with editcomponents permissions to inject
commands into product names and other attributes (CVE-2014-8630).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | bugzilla | 0 (affected), 4.4.8-1.mga4 (unaffected) | — |
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.