CVE-2010-2758: mozilla bugzilla
CVSS: 5.0v2.0MediumModified
Published 13-08-2010Last modified 07-08-2024
Vulnerability summary
CVE-2010-2758 is a medium (CVSS 5.0) vulnerability in mozilla bugzilla. EPSS estimates a 1.41% chance of exploitation in the next 30 days, higher than 72.2% of scored vulnerabilities.
CVSS score
5.0/10
010
Medium · v2.0 (NVD)EPSS score
1.41%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 13-08-2010PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Bugzilla 2.17.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 generates different error messages depending on whether a product exists, which makes it easier for remote attackers to guess product names via unspecified use of the (1) Reports or (2) Duplicates page.
CVSS metrics
1 score · 1 source · 1 versionMedium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:P/I:N/A:NSourcesSingle source
EPSS trend
Probability
1.41%
Chance of exploitation in the next 30 days
Percentile
72%
Versus all other CVEs
30-day change
0.00 pp
From 1.41% on 19-09-2026
19-09-202619-10-2026
EPSS score1.41%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Mozilla1 product
- bugzilla2.2 | 2.4 | 2.6 | 2.8 | 2.9 | 2.17.1 | 2.17.2 | 2.17.3 | 2.17.4 | 2.17.5 | 2.17.6 | 2.17.7 | 2.18 | 2.18:rc1 | 2.18:rc2 | 2.18:rc3 | 2.18.1 | 2.18.2 | 2.18.3 | 2.18.4 | 2.18.5 | 2.18.6 | 2.18.7 | 2.18.8 | 2.18.9 | 2.19 | 2.19.1 | 2.19.2 | 2.19.3 | 2.20 | 2.20:rc1 | 2.20:rc2 | 2.20.1 | 2.20.2 | 2.20.3 | 2.20.4 | 2.20.5 | 2.20.6 | 2.20.7 | 2.21 | 2.21.1 | 2.21.2 | 2.22 | 2.22:rc1 | 2.22.1 | 2.22.3 | 2.22.4 | 2.22.5 | 2.22.6 | 2.22.7 | 2.23 | 2.23.1 | 2.23.2 | 2.23.3 | 2.23.4 | 3.0 | 3.0:rc1 | 3.0.0 | 3.0.1 | 3.0.2 | 3.0.3 | 3.0.4 | 3.0.5 | 3.0.6 | 3.0.7 | 3.0.8 | 3.0.9 | 3.0.10 | 3.0.11 | 3.1.0 | 3.1.1 | 3.1.2 | 3.1.3 | 3.2 | 3.2.2 | 3.2.3 | 3.2.4 | 3.2.5 | 3.2.6 | 3.2.7 | 3.3.1 | 3.3.2 | 3.3.3 | 3.3.4 | 3.4.1 | 3.4.2 | 3.4.3 | 3.4.4 | 3.4.5 | 3.4.6 | 3.4.7 | 3.5.1 | 3.5.2 | 3.5.3 | 3.6 | 3.6.1 | 3.7 | 3.7.1 | 3.7.2
1 vendor · 1 product
References
12 links- bugzilla.mozilla.org/show_bug.cgi?id=519835X Refsource CONFIRM
- lists.fedoraproject.org/pipermail/package-announce/2010-August/046534.htmlVendor AdvisoryX Refsource FEDORA
- lists.fedoraproject.org/pipermail/package-announce/2010-August/046518.htmlVendor AdvisoryX Refsource FEDORA
- bugzilla.redhat.com/show_bug.cgi?id=623423X Refsource CONFIRM
- lists.fedoraproject.org/pipermail/package-announce/2010-August/046546.htmlVendor AdvisoryX Refsource FEDORA
- www.bugzilla.org/security/3.2.7/X Refsource CONFIRM
- bugzilla.mozilla.org/show_bug.cgi?id=577139X Refsource CONFIRM