Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Bugzilla 3.3.1 through 3.4.4, 3.5.1, and 3.5.2 does not allow group restrictions to be preserved throughout the process of moving a bug to a different product category, which allows remote attackers to obtain sensitive information via a request for a bug in opportunistic circumstances.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Bugzilla组选择信息泄露漏洞
Vulnerability Description
Bugzilla是很多软件项目都在使用的基于Web的BUG跟踪系统。 在将Bug从一个产品移动到另一个产品中时，会显示一个中间页面让用户选择Bug在新产品中应限制到的组，但在3.4.x版本系列中的一个功能倒退导致忽略了所有的组。作为临时解决方案，用户必须分两步首先将Bug移动至新产品中然后再限制到期望的组中，在这两步之间的时间窗口中Bug是临时公开可见的。
CVSS Information
N/A
Vulnerability Type
N/A