Alexander Færøy

**Name of the Vulnerable Software and Affected Versions** Bugzilla versions 2.17.4 through 2.20.6 Bugzilla versions 2.22 through 2.22.5 Bugzilla versions 3.0 through 3.0.5 Bugzilla versions 3.2 before 3.2 RC2 **Description** The issue allows remote authenticated users to bypass moderation and approve or disapprove quips by making a direct request to "quips.cgi" with the `action` parameter set to "approve". **Recommendations** For Bugzilla versions 2.17.4 through 2.20.6, update to version 2.20.7 or later to resolve the issue. For Bugzilla versions 2.22 through 2.22.5, update to version 2.22.6 or later to resolve the issue. For Bugzilla versions 3.0 through 3.0.5, update to version 3.0.6 or later to resolve the issue. For Bugzilla versions 3.2 before 3.2 RC2, update to version 3.2 RC2 or later to resolve the issue. As a temporary workaround, consider restricting access to the "quips.cgi" endpoint to minimize the risk of exploitation.