process_bug.cgi in Bugzilla 2.9 through 2.18rc2 and 2.19 from CVS does not check edit permissions on the keywords field, which allows remote authenticated users to modify the keywords in a bug via the keywordaction parameter.
                
            References
                    Configurations
                    Configuration 1 (hide)
| 
 | 
Information
                Published : 2004-10-24 21:00
Updated : 2017-07-10 18:31
NVD link : CVE-2004-1633
Mitre link : CVE-2004-1633
JSON object : View
CWE
                Products Affected
                mozilla
- bugzilla


