Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
template/en/default/bug/field-events.js.tmpl in Bugzilla 3.x before 3.6.12, 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1 generates JavaScript function calls containing private product names or private component names in certain circumstances involving custom-field visibility control, which allows remote attackers to obtain sensitive information by reading HTML source code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Bugzilla field-events.js.tmpl产品和组件名信息泄露漏洞
Vulnerability Description
Bugzilla是美国Mozilla基金会开发的一套开源的缺陷跟踪系统，它可管理软件开发中缺陷的提交（new）、修复（resolve）、关闭（close）等整个生命周期。 Bugzilla 3.6.12之前的3.x版本、3.7.x和4.0.9之前的4.0.x版本、4.1.x和4.2.4之前的4.2.x版本、4.3.x和4.4rc1之前的4.4.x版本中template/en/default/bug/field-events.js.tmpl中存在漏洞，该漏洞源于程序在自定义字段不可见组件控制下生成JavaS
CVSS Information
N/A
Vulnerability Type
N/A