Description
The Flag::validate and Flag::modify functions in Bugzilla 2.17.1 to 2.18.1 and 2.19.1 to 2.19.3 do not verify that the flag ID is appropriate for the given bug or attachment ID, which allows users to change flags on arbitrary bugs and obtain a bug summary via process_bug.cgi.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1014428
Patch x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=293159
Patch, Vendor Advisory x_refsource_confirm
http://www.bugzilla.org/security/2.18.1/
Scores
EPSS
0.0093
EPSS Percentile
56.7%
Details
Status
published
Products (12)
mozilla/bugzilla
2.17.1
mozilla/bugzilla
2.17.3
mozilla/bugzilla
2.17.4
mozilla/bugzilla
2.17.5
mozilla/bugzilla
2.17.6
mozilla/bugzilla
2.17.7
mozilla/bugzilla
2.18 (4 CPE variants)
mozilla/bugzilla
2.18.1
mozilla/bugzilla
2.19
mozilla/bugzilla
2.19.1
... and 2 more
Published
Jul 08, 2005
Tracked Since
Feb 18, 2026