Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Bugzilla 2.x before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote authenticated users to conduct cross-site scripting (XSS) and related attacks by uploading HTML and JavaScript attachments that are rendered by web browsers.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Bugzilla上传附件跨站请求伪造漏洞
Vulnerability Description
Bugzilla是很多软件项目都在使用的基于Web的BUG跟踪系统。 Bugzilla用户可以上传HTML或JavaScript附件，之后其他用户可以在Web浏览器中查看上传的附件。攻击者可以诱骗其他Bugzilla用户查看恶意附件，由于Bugzilla使用与其他应用程序相同的域名查看附件，恶意附件可以访问用户的cookie并执行受限制的操作。
CVSS Information
N/A
Vulnerability Type
N/A