cbcvebase.
CVE-2004-1634
published 2004-10-25

CVE-2004-1634: show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a bug to XML, shows comments and…

medium5CVSS 3.1
AVNACLAuNCPINAN
show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a bug to XML, shows comments and attachment summaries which are marked as private, which allows remote attackers to gain sensitive information.

Affected

25 ranges
VendorProductVersion rangeFixed in
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla