process_bug.cgi in Bugzilla 2.9 through 2.18rc2 and 2.19 from CVS does not check edit permissions on the keywords field, which allows remote authenticated users to modify the keywords in a bug via the keywordaction parameter.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2004-10-24 21:00
Updated : 2017-07-10 18:31
NVD link : CVE-2004-1633
Mitre link : CVE-2004-1633
JSON object : View
CWE
Products Affected
mozilla
- bugzilla