Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Search.pm in Bugzilla 2.19.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 allows remote attackers to determine the group memberships of arbitrary users via vectors involving the Search interface, boolean charts, and group-based pronouns.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Bugzilla 'Search.pm' 权限许可和访问控制漏洞
Vulnerability Description
Bugzilla是很多软件项目都在使用的基于Web的BUG跟踪系统。 Bugzilla 2.19.1至3.2.7版本，3.3.1至3.4.7版本，3.5.1至3.6.1版本，以及3.7至3.7.2版本中的Search.pm存在漏洞。正常情况下非特权用户是不允许查看其他用户的组所有权，但布尔表允许用户使用基于组的代词，间接泄露组所有权。远程攻击者可以借助涉及搜索界面，布尔图表和基于组的代词的向量确定任意用户的组成员身份。
CVSS Information
N/A
Vulnerability Type
N/A