Lucene search
HistoryAug 12, 2002 - 4:00 a.m.
CVE-2002-0807
cve-2002-0807
bugzilla
cross-site scripting
security vulnerability
remote code execution
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
77.7%
Cross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, could allow remote attackers to execute script as other Bugzilla users via the full name (real name) field, which is not properly quoted by editusers.cgi.
Affected configurations
Node
mozillabugzillaMatch2.14
ORmozillabugzillaMatch2.14.1
ORmozillabugzillaMatch2.16
ORmozillabugzillaMatch2.16rc1
| CPE | Name | Operator | Version |
|---|---|---|---|
| mozilla:bugzilla | mozilla bugzilla | eq | 2.14 |
| mozilla:bugzilla | mozilla bugzilla | eq | 2.14.1 |
| mozilla:bugzilla | mozilla bugzilla | eq | 2.16 |
Related
cvelist
cvelist
CVE-2002-0807
2002-07-31 04:00:00
nvd
nvd
CVE-2002-0807
2002-08-12 04:00:00
nessus
nessus
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
77.7%
Related for CVE-2002-0807