CVE-2007-5038 json
The offer_account_by_email function in User.pm in the WebService for Bugzilla before 3.0.2, and 3.1.x before 3.1.2, does not check the valu…
published 2007-09-24 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-5019
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.0%
- EPSS 2.0% chance of exploitation in 30 days, percentile 80%
- public exploits
- 0
- none known
Summary
The offer_account_by_email function in User.pm in the WebService for Bugzilla before 3.0.2, and 3.1.x before 3.1.2, does not check the value of the createemailregexp parameter, which allows remote attackers to bypass intended restrictions on account creation.
Patch / fix
- bugzilla.org/security/3.0.1/ patch
- secunia.com/advisories/26848 advisory
Exploit prediction
1.96% chance of exploitation in the next 30 days, higher than 80% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- bugzilla.mozilla.org https://bugzilla.mozilla.org/show_bug.cgi?id=395632 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Classification
- Weakness
-
- CWE-264 Permissions, Privileges, and Access Controls
References
-
secunia.com
/advisories/26848
third-party-advisory, patch, vendor-advisory
-
bugzilla.org
/security/3.0.1/
patch
-
bugzilla.mozilla.org
/show_bug.cgi?id=395632
exploit
-
fedoranews.org
/updates/FEDORA-2007-229.shtml
vendor-advisory
-
vupen.com
/english/advisories/2007/3200
vdb-entry
-
securityfocus.com
/archive/1/480077/100/0/threaded
mailing-list
- bugzilla.redhat.com /show_bug.cgi?id=299981
-
secunia.com
/advisories/26969
third-party-advisory
-
securitytracker.com
/id?1018719
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/36692
vdb-entry
-
securityfocus.com
/bid/25725
vdb-entry
Sources
- CVE List CVE-2007-5038
- NVD CVE-2007-5038
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.