mozilla bonsai vulnerabilities

Latest mozilla bonsai CVEs

Newest publication first

1. CVE-2003-0155 bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication.

   Published 2003-03-26

   Medium·CVSS 5.0 EPSS 1.8%

   bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication.

2. CVE-2003-0152 Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user.

   Published 2003-03-26

   High·CVSS 7.5 EPSS 2.4%

   Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user.

3. CVE-2003-0153 bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi.

   Published 2003-03-26

   Medium·CVSS 5.0 EPSS 5.7%

   bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi.

4. CVE-2003-0154 Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file...

   Published 2003-03-26

   Medium·CVSS 6.8 EPSS 4.6%

   Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4)...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.