CVE-2009-0481: Mozilla Bugzilla

Low severity, CVSS 3.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Bugzilla 2.x before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote authenticated users to conduct cross-site scripting (XSS) and related attacks by uploading HTML and JavaScript attachments that are rendered by web browsers.

Affected products

• Mozilla Bugzilla: version 2.10 only; version 2.12 only; version 2.14 only; version 2.14.1 only; version 2.14.2 only; version 2.14.3 only; …

Published 2009-02-09. Last modified 2026-06-16.