Beveiligingsadvies

CVE-2012-4199

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2012-11-16 11:00:00

Laatst bijgewerkt 2024-08-06 20:28:07

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

template/en/default/bug/field-events.js.tmpl in Bugzilla 3.x before 3.6.12, 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1 generates JavaScript function calls containing private product names or private component names in certain circumstances involving custom-field visibility control, which allows remote attackers to obtain sensitive information by reading HTML source code.

← Alle CVE's bekijken Bekijk op cve.org ↗