← Database

CVE-2010-2756

MEDIUM CVSS: 5.0 Published: 2010-08-16 Modified: 2026-06-16

Description

Search.pm in Bugzilla 2.19.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 allows remote attackers to determine the group memberships of arbitrary users via vectors involving the Search interface, boolean charts, and group-based pronouns.

Affected Platforms

Mozilla Bugzilla

Weakness Type

CWE-264

References