Vulnerability in Mozilla Bugzilla
CVE-2004-1061
Cross-site scripting (XSS) vulnerability in Bugzilla before 2.18, including 2.16.x before 2.16.11, allows remote attackers to inject arbitrary HTML and web script via forced error messages, as demonstrated using the action parameter.
EPSS: 0.010 (60.3th percentile) — read the EPSS interpretation.
Affected products
- Mozilla Bugzilla — versions 2.16.1, 2.16.2, 2.16.3
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_CONFIRM)