Information Leakage Vulnerability in Bugzilla Versions Prior to 4.4

CVE-2018-5123 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

A third party website can access information available to a user with access to a restricted bug entry using the image generation in report.cgi in all Bugzilla versions prior to 4.4.

Learn more about our Web App Pen Testing.