CVE-2007-5038

HIGH · CVSS 7.5 EPSS 1.96%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-09-24 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2007-5038

Severity

HIGH

CVSS

7.5

EPSS

1.96%

Original NVD Description

The offer_account_by_email function in User.pm in the WebService for Bugzilla before 3.0.2, and 3.1.x before 3.1.2, does not check the value of the createemailregexp parameter, which allows remote attackers to bypass intended restrictions on account creation.