cbcvebase.
CVE-2008-6098
published 2009-02-09

CVE-2008-6098: Bugzilla 3.2 before 3.2 RC2, 3.0 before 3.0.6, 2.22 before 2.22.6, 2.20 before 2.20.7, and other versions after 2.17.4 allows remote authenticated users to…

medium4CVSS 3.1
AVNACLAuSCNINAP
Bugzilla 3.2 before 3.2 RC2, 3.0 before 3.0.6, 2.22 before 2.22.6, 2.20 before 2.20.7, and other versions after 2.17.4 allows remote authenticated users to bypass moderation to approve and disapprove quips via a direct request to quips.cgi with the action parameter set to "approve."

Affected

58 ranges· showing 25
VendorProductVersion rangeFixed in
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla
mozillabugzilla