cbcvebase.
CVE-2008-2104
published 2008-05-07

CVE-2008-2104: The WebService in Bugzilla 3.1.3 allows remote authenticated users without canconfirm privileges to create NEW or ASSIGNED bug entries via a request to the…

medium4CVSS 3.1
AVNACLAuSCNIPAN
The WebService in Bugzilla 3.1.3 allows remote authenticated users without canconfirm privileges to create NEW or ASSIGNED bug entries via a request to the XML-RPC interface, which bypasses the canconfirm check.

Affected

1 ranges
VendorProductVersion rangeFixed in
mozillabugzilla——