CVE-2004-0703: Mozilla Bugzilla

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users with "grant membership" privileges to grant memberships to groups that the user does not control.

Affected products

• Mozilla Bugzilla: version 2.4 only; version 2.6 only; version 2.8 only; version 2.10 only; version 2.12 only; version 2.14 only; …

Published 2004-07-27. Last modified 2026-06-16.