Bugzilla Security Vulnerabilities and Issues — Bugzilla CVE List

Lucene search

MozillaBugzilla

3 matches found

CVE•added 2005/05/14 4:0 a.m.•45 views

CVE-2005-1563

Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 displays a different error message depending on whether a product exists or not, which allows remote attackers to determine hidden products.

5CVSS6.7AI score0.00807EPSS

CVE•added 2005/05/14 4:0 a.m.•40 views

CVE-2005-1564

post_bug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users to "enter bugs into products that are closed for bug entry" by modifying the URL to specify the name of the product.

7.5CVSS6.4AI score0.01819EPSS

CVE•added 2005/05/14 4:0 a.m.•38 views

CVE-2005-1565

Bugzilla 2.17.1 through 2.18, 2.19.1, and 2.19.2, when a user is prompted to log in while attempting to view a chart, displays the password in the URL, which may allow local users to gain sensitive information from web logs or browser history.

5CVSS6.3AI score0.00804EPSS