Question 1

What is CVE-2003-1043?

Accepted Answer

CVE-2003-1043 is a high-severity software vulnerability with a CVSS score of 10. SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote authenticated users with editkeywords privileges to execute arbitrary SQL via the id parameter to editkeywords.cgi.

Question 2

Is CVE-2003-1043 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 3%.

Question 3

What products does CVE-2003-1043 affect?

Accepted Answer

Tracked products affected include Bugzilla. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2003-1043?

Accepted Answer

Apply the vendor fix promptly. An official patch or advisory is available. Upgrade affected products to a fixed version.

CVE-2003-1043

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information