Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The offer_account_by_email function in User.pm in the WebService for Bugzilla before 3.0.2, and 3.1.x before 3.1.2, does not check the value of the createemailregexp parameter, which allows remote attackers to bypass intended restrictions on account creation.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Bugzilla User.pm非授权创建帐户绕过访问验证漏洞
Vulnerability Description
Bugzilla是一种流行的开源软件Bug跟踪系统。 Bugzilla的实现上存在漏洞，远程攻击者可能利用此漏洞非授权创建帐户获取对系统的访问。 Bugzilla的User.pm模块的offer_account_by_email()函数没有对createemailregexp参数做充分的检查过滤，如果系统上安装了SOAP::Lite Perl模块，那么远程攻击者可能利用此漏洞在系统上创建Bugzilla用户帐号，从而获取对系统的访问。
CVSS Information
N/A
Vulnerability Type
N/A