Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CRLF injection vulnerability in Bugzilla before 3.2.9, 3.4.x before 3.4.9, 3.6.x before 3.6.3, and 4.0.x before 4.0rc1, when Server Push is enabled in a web browser, allows remote attackers to inject arbitrary HTTP headers and content, and conduct HTTP response splitting attacks, via a crafted URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Bugzilla CRLF代码注入漏洞
Vulnerability Description
Bugzilla是一个基于WEB的漏洞收集系统，使用了Perl和MySQL。 当web浏览器中的Server Push被启用时，Bugzilla 3.2.9之前版本，3.4.9之前的3.4.x版本，3.6.3之前的3.6.x版本，以及4.0rc1之前的4.0.x版本中存在CRLF注入漏洞。远程攻击者可以借助特制的URL注入任意HTTP头以及内容，并进行HTTP响应分裂攻击。
CVSS Information
N/A
Vulnerability Type
N/A