Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Bugzilla before 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3 does not block access to files and directories that are used by custom installations, which allows remote attackers to obtain sensitive information via requests for (1) CVS/, (2) contrib/, (3) docs/en/xml/, (4) t/, or (5) old-params.txt.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Bugzilla目录访问信息泄露漏洞
Vulnerability Description
Bugzilla 是一个用于软件缺陷追踪的网络应用程序，基于Web的漏洞跟踪系统和Bug管理系统。 Bugzilla允许Web浏览器显示CVS/、contrib/、docs/en/xml/、t/目录中的文件及old-params.txt文件的内容。默认状态下这些文件不包含有敏感数据，但自定义安装可能向上述目录中添加了脚本或文件，如口令或其他敏感信息。不受限制的访问这些目录就可能导致泄漏敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A