Skip to content
OpenAdvisories
Unscored CVE-2018-5123 EUVD-2018-16909GHSA-h29x-g5g9-4c57

A third party website can access information available to a user with access to a restricted bug entry using the image generation in report…

Published Apr 29, 2019 · Updated Aug 5, 2024 · Assigned by mozilla

Description

A third party website can access information available to a user with access to a restricted bug entry using the image generation in report.cgi in all Bugzilla versions prior to 4.4.

Affected products

VendorProductAffectedFixed
Mozilla Bugzilla All versions prior to Bugzilla 4.4 —

References