Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a bug to XML, shows comments and attachment summaries which are marked as private, which allows remote attackers to gain sensitive information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Bugzilla多个认证绕过和信息泄露漏洞
Vulnerability Description
Bugzilla 2.17.1版本到2.18rc2版本以及来自CVS的2.19版本中的show_bug.cgi在使用insidergroup功能以及向XML输出漏洞时,显示被标记为私用的注释和附件摘要,远程攻击者可以获得敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A