Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Bugzilla before 2.14 includes the username and password in URLs, which could allow attackers to gain privileges by reading the information from the web server logs, or by "shoulder-surfing" and observing the web browser's location bar.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Bugzilla权限漏洞
Vulnerability Description
Bugzilla 2.14 之前版本在URLs中包含用户名和密码，远程攻击者可以通过读取来自web服务器日志上的信息，或者通过"shoulder-surfing"和观察Web浏览器的地址栏提升权限。
CVSS Information
N/A
Vulnerability Type
N/A