|
Bugzilla Security Bypass and Cross Site Scripting Vulnerabilities
Bugzilla is prone to a security-bypass and a cross-site scripting vulnerability because it fails to properly validate user credentials and sanitize user-supplied input. An attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks. The attacker may leverage the security-bypass issue to modify the status of bugs, despite the attacker's insufficient privileges. Bugzilla 2.17.2 and 3.1.3 are vulnerable; other versions may also be affected. |
|
|
Privacy Statement |
