Beveiligingsadvies

CVE-2002-0809

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2003-04-02 05:00:00

Laatst bijgewerkt 2024-08-08 03:03:49

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, does not properly handle URL-encoded field names that are generated by some browsers, which could cause certain fields to appear to be unset, which has the effect of removing group permissions on bugs when buglist.cgi is provided with the encoded field names.

← Alle CVE's bekijken Bekijk op cve.org ↗