5

CVE-2010-3764

Exploit

The Old Charts implementation in Bugzilla 2.12 through 3.2.8, 3.4.8, 3.6.2, 3.7.3, and 4.1 creates graph files with predictable names in graphs/, which allows remote attackers to obtain sensitive information via a modified URL.

Data is provided by the National Vulnerability Database (NVD)
Mozilla ≫ Bugzilla Version2.2
Mozilla ≫ Bugzilla Version2.4
Mozilla ≫ Bugzilla Version2.6
Mozilla ≫ Bugzilla Version2.8
Mozilla ≫ Bugzilla Version2.9
Mozilla ≫ Bugzilla Version2.12
Mozilla ≫ Bugzilla Version2.14
Mozilla ≫ Bugzilla Version2.14.1
Mozilla ≫ Bugzilla Version2.14.2
Mozilla ≫ Bugzilla Version2.14.3
Mozilla ≫ Bugzilla Version2.14.4
Mozilla ≫ Bugzilla Version2.14.5
Mozilla ≫ Bugzilla Version2.16
Mozilla ≫ Bugzilla Version2.16 Updaterc1
Mozilla ≫ Bugzilla Version2.16 Updaterc2
Mozilla ≫ Bugzilla Version2.16.1
Mozilla ≫ Bugzilla Version2.16.2
Mozilla ≫ Bugzilla Version2.16.3
Mozilla ≫ Bugzilla Version2.16.4
Mozilla ≫ Bugzilla Version2.16.5
Mozilla ≫ Bugzilla Version2.16.6
Mozilla ≫ Bugzilla Version2.16.7
Mozilla ≫ Bugzilla Version2.16.8
Mozilla ≫ Bugzilla Version2.16.9
Mozilla ≫ Bugzilla Version2.16.10
Mozilla ≫ Bugzilla Version2.16.11
Mozilla ≫ Bugzilla Version2.16_rc2
Mozilla ≫ Bugzilla Version2.17
Mozilla ≫ Bugzilla Version2.17.1
Mozilla ≫ Bugzilla Version2.17.2
Mozilla ≫ Bugzilla Version2.17.3
Mozilla ≫ Bugzilla Version2.17.4
Mozilla ≫ Bugzilla Version2.17.5
Mozilla ≫ Bugzilla Version2.17.6
Mozilla ≫ Bugzilla Version2.17.7
Mozilla ≫ Bugzilla Version2.18
Mozilla ≫ Bugzilla Version2.18 Updaterc1
Mozilla ≫ Bugzilla Version2.18 Updaterc2
Mozilla ≫ Bugzilla Version2.18 Updaterc3
Mozilla ≫ Bugzilla Version2.18.1
Mozilla ≫ Bugzilla Version2.18.2
Mozilla ≫ Bugzilla Version2.18.3
Mozilla ≫ Bugzilla Version2.18.4
Mozilla ≫ Bugzilla Version2.18.5
Mozilla ≫ Bugzilla Version2.18.6
Mozilla ≫ Bugzilla Version2.18.7
Mozilla ≫ Bugzilla Version2.18.8
Mozilla ≫ Bugzilla Version2.18.9
Mozilla ≫ Bugzilla Version2.19
Mozilla ≫ Bugzilla Version2.19.1
Mozilla ≫ Bugzilla Version2.19.2
Mozilla ≫ Bugzilla Version2.19.3
Mozilla ≫ Bugzilla Version2.20
Mozilla ≫ Bugzilla Version2.20 Updaterc1
Mozilla ≫ Bugzilla Version2.20 Updaterc2
Mozilla ≫ Bugzilla Version2.20.1
Mozilla ≫ Bugzilla Version2.20.2
Mozilla ≫ Bugzilla Version2.20.3
Mozilla ≫ Bugzilla Version2.20.4
Mozilla ≫ Bugzilla Version2.20.5
Mozilla ≫ Bugzilla Version2.20.6
Mozilla ≫ Bugzilla Version2.20.7
Mozilla ≫ Bugzilla Version2.21
Mozilla ≫ Bugzilla Version2.21.1
Mozilla ≫ Bugzilla Version2.21.2
Mozilla ≫ Bugzilla Version2.22
Mozilla ≫ Bugzilla Version2.22 Updaterc1
Mozilla ≫ Bugzilla Version2.22.1
Mozilla ≫ Bugzilla Version2.22.2
Mozilla ≫ Bugzilla Version2.22.3
Mozilla ≫ Bugzilla Version2.22.4
Mozilla ≫ Bugzilla Version2.22.5
Mozilla ≫ Bugzilla Version2.22.6
Mozilla ≫ Bugzilla Version2.22.7
Mozilla ≫ Bugzilla Version2.23
Mozilla ≫ Bugzilla Version2.23.1
Mozilla ≫ Bugzilla Version2.23.2
Mozilla ≫ Bugzilla Version2.23.3
Mozilla ≫ Bugzilla Version2.23.4
Mozilla ≫ Bugzilla Version3.2.1
Mozilla ≫ Bugzilla Version3.2.2
Mozilla ≫ Bugzilla Version3.2.3
Mozilla ≫ Bugzilla Version3.2.4
Mozilla ≫ Bugzilla Version3.2.5
Mozilla ≫ Bugzilla Version3.2.6
Mozilla ≫ Bugzilla Version3.2.7
Mozilla ≫ Bugzilla Version3.2.8
Mozilla ≫ Bugzilla Version3.4.8
Mozilla ≫ Bugzilla Version3.6.2
Mozilla ≫ Bugzilla Version3.7.3
Mozilla ≫ Bugzilla Version4.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.85% 0.727
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.