Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Bugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) page headers using the H1, H2, and H3 HTML tags in global/header.html.tmpl, (2) description fields of certain items in various edit cgi scripts, and (3) the id parameter in showdependencygraph.cgi.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Bugzilla 多个跨站脚本漏洞
Vulnerability Description
Bugzilla是很多软件项目都在使用的基于Web的bug跟踪系统。 Bugzilla中存在多个安全漏洞，具体如下：由于没有正确地验证一些字段的输入及<h1>和<h2>在global/header.html.tmpl;标签嵌入的内容，确定列表在不同编辑CGI脚本. showdependencygraph.cgi中的ID参数.攻击者可以在用户浏览器对话框的环境中执行任意HTML和脚本代码。
CVSS Information
N/A
Vulnerability Type
N/A