Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CRLF injection vulnerability in Bugzilla 2.17.1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 allows remote attackers to inject arbitrary e-mail headers via an attachment description in a flagmail notification.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Bugzilla CRLF注入漏洞
Vulnerability Description
Bugzilla是美国Mozilla基金会开发的一套开源的缺陷跟踪系统，它可管理软件开发中缺陷的提交（new）、修复（resolve）、关闭（close）等整个生命周期。 Bugzilla中存在CRLF注入漏洞。Bugzilla通常发送两种类型的电子邮件通知：bugmails和flagmails。bugmails是标准电子邮件用户在bug更改时收到的。flagmails仅发送给旗标要求者或旗标请求者。对于flagmails，附件说明中有新行可导致在编辑旗标时在通知中注入特制标头。仅收到bugmail的用户
CVSS Information
N/A
Vulnerability Type
N/A