CVE-2014-1546 Cross-site request forgery in n/a
Remote attackers can exploit a JSONP endpoint flaw in Bugzilla to perform CSRF attacks and access sensitive information via crafted SWF content.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2014-1546?
CVE-2014-1546 is a medium-severity vulnerability in Mozilla Bugzilla, published on 14 Aug 2014. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The response function in the JSONP endpoint in WebService/Server/JSONRPC.pm in jsonrpc.cgi in Bugzilla 3.x and 4.x before 4.0.14, 4.1.x and 4.2.x before 4.2.10, 4.3.x and 4.4.x before 4.4.5, and 4.5.x before 4.5.5 accepts certain long callback values and does not restrict the initial bytes of a JSONP response, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks, and obtain sensitive information, via a crafted OBJECT element with SWF content consistent with the _bz_callback character set.
Weakness: CWE-352
Which versions are affected by CVE-2014-1546?
It affects 1 product.
Products include Mozilla Bugzilla.
How do I fix CVE-2014-1546?
Upgrade to a fixed version.
Is CVE-2014-1546 being exploited?
There is no known exploitation of CVE-2014-1546 in the wild and no public exploit code.
Other vulnerabilities in Mozilla Bugzilla
Sources
Also known as GHSA-xmqw-mh3q-89r9, MGASA-2014-0349.