CVE-2004-1634

Bugzilla 2.17.1-2.18rc2 - Information Disclosure via XML Export

Title source: llm
STIX 2.1

Description

show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a bug to XML, shows comments and attachment summaries which are marked as private, which allows remote attackers to gain sensitive information.

References (4)

Core 4
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=109872095201238&w=2
Vendor Advisory x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=263780
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/17841
Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/11511

Scores

EPSS 0.0121
EPSS Percentile 65.1%

Details

Status published
Products (25)
mozilla/bugzilla 2.4
mozilla/bugzilla 2.6
mozilla/bugzilla 2.8
mozilla/bugzilla 2.10
mozilla/bugzilla 2.12
mozilla/bugzilla 2.14
mozilla/bugzilla 2.14.1
mozilla/bugzilla 2.14.2
mozilla/bugzilla 2.14.3
mozilla/bugzilla 2.14.4
... and 15 more
Published Oct 25, 2004
Tracked Since Feb 18, 2026