Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Template.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2 does not properly construct CSV files, which allows remote attackers to obtain sensitive information by leveraging a web browser that interprets CSV data as JavaScript code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Bugzilla 信息泄露漏洞
Vulnerability Description
Bugzilla是美国Mozilla基金会开发的一套开源的缺陷跟踪系统，它可管理软件开发中缺陷的提交（new）、修复（resolve）、关闭（close）等整个生命周期。 Bugzilla的Template.pm文件中存在安全漏洞，该漏洞源于程序没有正确构建CSV文件。远程攻击者可借助将CSV数据作为JavaScript代码解析的Web浏览器利用该漏洞获取敏感新。以下版本受到影响：Bugzilla 2.x版本，3.x版本，4.2.16之前4.x版本，4.4.11之前4.3.x版本和4.4.x版本，5.0.
CVSS Information
N/A
Vulnerability Type
N/A