CVE-2011-2979: mozilla bugzilla
Vulnerability summary
CVE-2011-2979 is a medium (CVSS 5.0) vulnerability in mozilla bugzilla. EPSS estimates a 2.07% chance of exploitation in the next 30 days, higher than 81% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 09-08-2011PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Bugzilla 4.1.x before 4.1.3 generates different responses for certain assignee queries depending on whether the group name is valid, which allows remote attackers to determine the existence of private group names via a custom search. NOTE: this vulnerability exists because of a CVE-2010-2756 regression.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.07%
Chance of exploitation in the next 30 days
Percentile
81%
Versus all other CVEs
30-day change
0.00 pp
From 2.07% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (bugzilla.mozilla.org)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Mozilla1 product
- bugzilla4.1 | 4.1.1 | 4.1.2
1 vendor · 1 product
