CVE-2011-2380: Mozilla Bugzilla

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

Bugzilla 2.23.3 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 allows remote attackers to determine the existence of private group names via a crafted parameter during (1) bug creation or (2) bug editing.

Affected products

• Mozilla Bugzilla: version 2.22.7 only; version 2.23 only; version 2.23.1 only; version 2.23.2 only; version 2.23.3 only; version 3.4 only; …

Published 2011-08-09. Last modified 2026-06-16.