CVE-2003-0153 bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi.
MediumCVSS 5.0
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla bonsai | = 1.3 | No fix listed |
References
- bugzilla.mozilla.org
- 20020819 Advisory: Bonsai XSS and Physical Path Revealing Vulnerabilities mailing-list
- DSA-265 patch vendor-advisory
- 5517 vdb-entry
- bonsai-path-disclosure(9921) vdb-entry