CVE-2012-0466: Mozilla Bugzilla

Medium severity, CVSS 4.0. EPSS: 0.8% chance of exploitation in the next 30 days.

template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1 does not properly handle multiple logins, which allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive bug information via a crafted web page.

Affected products

• Mozilla Bugzilla: version 2.0 only; version 2.2 only; version 2.4 only; version 2.6 only; version 2.8 only; version 2.9 only; …

Published 2012-04-27. Last modified 2026-06-16.