Cross-site scripting (XSS) vulnerability in Bugzilla 2.4 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3, when Internet Explorer before 9 or Safari before 5.0.6 is used for Raw Unified mode, allows remote attackers to inject arbitrary web script or HTML via a crafted patch, related to content sniffing.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2011-08-09T19:00:00

Updated: 2017-08-28T12:57:01

Reserved: 2011-06-03T00:00:00


Link: CVE-2011-2379

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2011-08-09T19:55:01.433

Modified: 2021-07-23T15:12:30.843


Link: CVE-2011-2379

JSON object: View

cve-icon Redhat Information

No data.

CWE