CVE-2002-0009: Mozilla Bugzilla

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

show_bug.cgi in Bugzilla before 2.14.1 allows a user with "Bugs Access" privileges to see other products that are not accessible to the user, by submitting a bug and reading the resulting Product pulldown menu.

Affected products

• Mozilla Bugzilla: up to and including 2.14.1

Published 2002-01-31. Last modified 2026-06-16.