CVE-2009-0483

CVE-2009-0483 describes a Cross-Site Request Forgery (CSRF) vulnerability affecting Bugzilla versions 2.22 prior to 2.22.7, 3.0 prior to 3.0.7, 3.2 prior to 3.2.1, and 3.3 prior to 3.3.2. This flaw allows remote attackers to delete keywords or user preferences by tricking a logged-in user into clicking a malicious link or viewing an IMG tag. The vulnerability has a CVSS score of 5.8, indicating a medium severity, as it requires user interaction (medium attack complexity) but can be exploited remotely to impact data integrity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.