CVE-2006-0916

published 2006-02-28

CVE-2006-0916: Bugzilla 2.19.3 through 2.20 does not properly handle "//" sequences in URLs when redirecting a user from the login form, which could cause it to generate a…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

Bugzilla 2.19.3 through 2.20 does not properly handle "//" sequences in URLs when redirecting a user from the login form, which could cause it to generate a partial URL in a form action that causes the user's browser to send the form data to another domain.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
mozilla	bugzilla	—	—
mozilla	bugzilla	—	—
mozilla	bugzilla	—	—
mozilla	bugzilla	—	—
mozilla	bugzilla	—	—