本ページは mozilla bonsai に影響する公開済み CVE（NVD の CPE 経由で関連付け）を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2003-0155 | bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication. | [email protected] | 5.0 | 1.77% | 2003-04-02 | 2026-06-16 |
| CVE-2003-0154 | Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244. | [email protected] | 6.8 | 4.59% | 2003-04-02 | 2026-06-16 |
| CVE-2003-0153 | bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi. | [email protected] | 5.0 | 5.67% | 2003-04-02 | 2026-06-16 |
| CVE-2003-0152 | Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user. | [email protected] | 7.5 | 2.37% | 2003-04-02 | 2026-06-16 |