Description
Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users with "grant membership" privileges to grant memberships to groups that the user does not control.
References
- bugzilla-editusers-gain-privileges(16672) vdb-entry
- 10698 vdb-entry
- 20040710 [BUGZILLA] Multiple vulnerabilities in Bugzilla 2.16.5 and 2.17.7 mailing-list