CVE-2005-1564: Mozilla Bugzilla

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

post_bug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users to "enter bugs into products that are closed for bug entry" by modifying the URL to specify the name of the product.

Affected products

• Mozilla Bugzilla: version 2.10 only; version 2.12 only; version 2.14 only; version 2.14.1 only; version 2.14.2 only; version 2.14.3 only; …

Published 2005-05-12. Last modified 2026-06-16.