cbcvebase.
CVE-2012-1968
published 2012-07-30

CVE-2012-1968: Bugzilla 4.1.x and 4.2.x before 4.2.2 and 4.3.x before 4.3.2 uses bug-editor privileges instead of bugmail-recipient privileges during construction of HTML…

PriorityP416medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
1.46%
70.8th percentile
Bugzilla 4.1.x and 4.2.x before 4.2.2 and 4.3.x before 4.3.2 uses bug-editor privileges instead of bugmail-recipient privileges during construction of HTML bugmail documents, which allows remote attackers to obtain sensitive description information by reading the tooltip portions of an HTML e-mail message.

Affected

8 ranges
VendorProductVersion rangeFixed in
mozillabugzilla——
mozillabugzilla——
mozillabugzilla——
mozillabugzilla——
mozillabugzilla——
mozillabugzilla——
mozillabugzilla——
mozillabugzilla——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.