Vulnerability in Mozilla Bugzilla
CVE-2003-1044
editproducts.cgi in Bugzilla 2.16.3 and earlier, when usebuggroups is enabled, does not properly remove group add privileges from a group that is being deleted, which allows users with those privileges to perform unauthorized additions to the next group that is assigned with the original group ID.
EPSS: 0.012 (63.8th percentile) — read the EPSS interpretation.
Affected products
- Mozilla Bugzilla — versions 2.4, 2.6, 2.8
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)