Mozilla Bonsai vulnerabilities

4 CVEs affecting Mozilla Bonsai, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2003-0155, published 2003-04-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2003-0153, published 2003-04-02. Medium severity, CVSS 5.0. EPSS: 5.7% chance of exploitation in the next 30 days. bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi.
CVE-2003-0154, published 2003-04-02. Medium severity, CVSS 6.8. EPSS: 4.6% chance of exploitation in the next 30 days. Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the…
CVE-2003-0152, published 2003-04-02. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user.
CVE-2003-0155, published 2003-04-02. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication.