VULNERABILITY INTELLIGENCE

CVE-2002-0806

CVSS score2.1 LOW

EPSS probability0.31%

CISA KEVNot currently listed

Published2002-08-12

Last modified2026-06-16

Description

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows authenticated users with editing privileges to delete other users by directly calling the editusers.cgi script with the "del" option.