Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Bugzilla 2.17.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 generates different error messages depending on whether a product exists, which makes it easier for remote attackers to guess product names via unspecified use of the (1) Reports or (2) Duplicates page.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Bugzilla Reports和Duplicates页面信息泄露漏洞
Vulnerability Description
Bugzilla是很多软件项目都在使用的基于Web的BUG跟踪系统。 Bugzilla 2.17.1至3.2.7版本，3.3.1至3.4.7版本，3.5.1至3.6.1版本，以及3.7至3.7.2版本生成取决于产品是否存在的不同的错误信息，Reports和Duplicates页面的出错消息会确认不存在某产品，这允许用户猜测保密的产品名。
CVSS Information
N/A
Vulnerability Type
N/A