← Database

CVE-2008-6098

MEDIUM CVSS: 4.0 Published: 2009-02-09 Modified: 2026-06-16

Description

Bugzilla 3.2 before 3.2 RC2, 3.0 before 3.0.6, 2.22 before 2.22.6, 2.20 before 2.20.7, and other versions after 2.17.4 allows remote authenticated users to bypass moderation to approve and disapprove quips via a direct request to quips.cgi with the action parameter set to "approve."

Affected Platforms

Mozilla Bugzilla

Weakness Type

CWE-264

References