cbcvebase.
CVE-2002-0808
published 2002-08-12

CVE-2002-0808: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groupset of all bugs to the groupset of the first bug, which…

PriorityP419high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.12%
62.7th percentile
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groupset of all bugs to the groupset of the first bug, which could inadvertently cause insecure groupset permissions to be assigned to some bugs.

Affected

3 ranges
VendorProductVersion rangeFixed in
mozillabugzilla
mozillabugzilla
mozillabugzilla

CVSS provenance

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.