CVE-2005-1564

Published May 14, 2005 CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed
Description
post_bug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users to "enter bugs into products that are closed for bug entry" by modifying the URL to specify the name of the product.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2005-1567 post_bug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users to "enter bugs into products that are closed for bug entry" by modifying the URL to specify the name of the product.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 9:51 PM
Reserved
May 14, 2005, 12:00 AM
Status
Modified
Published
May 12, 2005, 4:00 AM
Modified
Jun 16, 2026, 10:13 PM