Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows authenticated users with editing privileges to delete other users by directly calling the editusers.cgi script with the del option.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Bugzilla | Mozilla | 2.16 | 2.16 |
Bugzilla | Mozilla | 2.16 | 2.16 |
Bugzilla | Mozilla | 2.14.1 | 2.14.1 |
Bugzilla | Mozilla | 2.14 | 2.14 |