CVE-2004-0706: Mozilla Bugzilla

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password in the web server log files.

Affected products

• Mozilla Bugzilla: version 2.4 only; version 2.6 only; version 2.8 only; version 2.10 only; version 2.12 only; version 2.14 only; …

Published 2004-07-27. Last modified 2026-06-16.