Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Bonsai远程路径信息泄露漏洞
Vulnerability Description
Mozilla Bonsai是一款允许用户查询CVS档案内容的工具,可以获得登记列表,登记日志等信息。 Mozilla Bonsai在处理畸形请求时返回的错误信息存在问题,远程攻击者可以利用这个漏洞获得请求文件路径信息。 /bonsai/cvsview2.cgi和/bonsai/multidiff.cgi脚本对畸形的请求处理不正确,会返回包含请求文件的绝对路径信息,导致信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A