CVE-2002-0008

Bugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to process_bug.cgi using the "who" parameter, instead of the…

published January 10, 2002

CVSS
—
EPSS
2%
Percentile
78.9
In the wild
Unconfirmed
What it is

Bugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to process_bug.cgi using the "who" parameter, instead of the Bugzilla_login cookie, or (2) post a bug as another user by modifying the reporter parameter to enter_bug.cgi, which is passed to post_bug.cgi.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01855 · 78.9th percentile
Published
2002-01-10T05:00Z
EPSS history
Timeline
  • 10 JAN 05:00Z
    Bugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to process_bug.cgi using the "who" parameter, instead of the…
    cvelistv5