AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2002-0008

HIGH · CVSS 7.5 EPSS 1.85%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2002-01-31 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. It may be remotely exploitable.

CVE
CVE-2002-0008
Severity
HIGH
CVSS
7.5
EPSS
1.85%

Original NVD Description

Bugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to process_bug.cgi using the "who" parameter, instead of the Bugzilla_login cookie, or (2) post a bug as another user by modifying the reporter parameter to enter_bug.cgi, which is passed to post_bug.cgi.