CVE-2002-0807: High severity Bugzilla vulnerability

Published Jul 31, 2002

Updated

Cross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, could allow remote attackers to execute script as other Bugzilla users via the full name (real name) field, which is not properly quoted by editusers.cgi.

Affected Software

4 affected components

Bugzilla=2.14

Bugzilla=2.14.1

Bugzilla=2.16

Bugzilla=2.16-rc1

Remediation

Patch Available

http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html

Event History

Jul 31, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0807?

CVE-2002-0807 is considered a moderate severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2002-0807?

To fix CVE-2002-0807, update Bugzilla to version 2.14.2 or later, or 2.16rc2 or later.

What software versions are affected by CVE-2002-0807?

CVE-2002-0807 affects Bugzilla versions 2.14, 2.14.1, and 2.16 up to 2.16rc1.

What is the impact of CVE-2002-0807?

The impact of CVE-2002-0807 includes the possibility for remote attackers to execute scripts in the context of other Bugzilla users.

Is CVE-2002-0807 still a concern today?

While CVE-2002-0807 is old, if you are using an outdated version of Bugzilla, it remains a significant concern.