cbcvebase.
CVE-2018-5123
published 2019-04-29

CVE-2018-5123: A third party website can access information available to a user with access to a restricted bug entry using the image generation in report.cgi in all Bugzilla…

high8.8CVSS 3.0
AVNACLPRNUIRSUCHIHAH
A third party website can access information available to a user with access to a restricted bug entry using the image generation in report.cgi in all Bugzilla versions prior to 4.4.

Affected

2 ranges
VendorProductVersion rangeFixed in
mozillabugzilla< 4.44.4
mozillabugzilla——