CVE-2010-2756: Mozilla Bugzilla

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

Search.pm in Bugzilla 2.19.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 allows remote attackers to determine the group memberships of arbitrary users via vectors involving the Search interface, boolean charts, and group-based pronouns.

Affected products

• Mozilla Bugzilla: version 2.2 only; version 2.4 only; version 2.6 only; version 2.8 only; version 2.9 only; version 2.19.1 only; …

Published 2010-08-16. Last modified 2026-06-16.