Bugzilla Cross Site Request Forgery

Summary

=======

Bugzilla is a Web-based bug-tracking system used by a large number of

software projects. The following security issue has been discovered

in Bugzilla:

* A CSRF vulnerability in the implementation of the XML-RPC API

when running under mod_perl could be used to make changes to

bugs or execute some admin tasks without the victim's knowledge.

All affected installations are encouraged to upgrade as soon as

possible.